Samsung · Mobile Devices
CVE-2023-21492
Samsung Mobile Devices Insertion of Sensitive Information Into Log File Vulnerability
What it is
Kernel pointers are printed in the log file prior to SMR May-2023 Release 1 allows a privileged local attacker to bypass ASLR.
CISA: Samsung mobile devices running Android 11, 12, and 13 contain an insertion of sensitive information into log file vulnerability that allows a privileged, local attacker to conduct an address space layout randomization (ASLR) bypass.
What to do
Apply updates per vendor instructions.
Deadline for US federal agencies: June 9, 2023
More exploited flaws from Samsung
| Added | Vulnerability | Product | Severity | Attack chance |
|---|---|---|---|---|
| Nov 10, 2025 | Out-of-Bounds Write | Mobile Devices | High 8.8 | 36% |
| Oct 2, 2025 | Out-of-Bounds Write | Mobile Devices | High 8.8 | 2.2% |
| Sep 18, 2023 | Use-After-Free | Mobile Devices | Medium 5.0 | 0.4% |
| Jun 29, 2023 | Unspecified | Mobile Devices | Medium 6.1 | 0.8% |
| Jun 29, 2023 | Improper Boundary Check | Mobile Devices | Medium 6.1 | 0.8% |
| Jun 29, 2023 | Race Condition | Mobile Devices | Medium 6.4 | 0.4% |
| Jun 29, 2023 | Race Condition | Mobile Devices | Medium 6.4 | 0.4% |
| Jun 29, 2023 | Out-of-Bounds Read | Mobile Devices | High 7.3 | 0.6% |
Sources: Known Exploited Vulnerabilities (CISA, public domain), CVE records (cve.org) and EPSS (FIRST). The chance of attacks is the EPSS estimate that someone will try to exploit the flaw in the next 30 days.