PT-2023-18231 · Google · Android 12+1

Dg · Published 2023-03-16 · Updated 2023-03-23 · CVE-2023-21462

Positive Technologies (AI Summary)

CVSS v3.1

4.2

Medium

Base vector

AV:L/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Quick Share Agent versions prior to 3.5.14.18 in Android 12 Quick Share Agent versions prior to 3.5.16.20 in Android 13

Description The issue allows a local attacker to access the MAC address without the required permission, potentially exposing sensitive information.

Recommendations For versions prior to 3.5.14.18 in Android 12, update to version 3.5.14.18 or later. For versions prior to 3.5.16.20 in Android 13, update to version 3.5.16.20 or later.

Fix

Weakness Enumeration

CWE-215

Related Identifiers

CVE-2023-21462

Affected Products

Android 12

Android 13

References · 3

• https://security.samsungmobile.com/serviceWeb.smsb?year=2023&month=03 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-21462 · Security Note
• https://osv.dev/vulnerability/CVE-2023-21462 · Vendor Advisory