PT-2023-28447 · Google+1 · Android 14+3

Elias Schröder · Published 2023-12-04 · Updated 2023-12-11 · CVE-2023-42577

Positive Technologies (AI Summary)

CVSS v3.1

6.8

Medium

Base vector

AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Samsung Voice Recorder versions prior to 21.4.15.01 in Android 12 and Android 13 Samsung Voice Recorder versions prior to 21.4.50.17 in Android 14

Description The issue is related to improper access control in the Samsung Voice Recorder, allowing physical attackers to access Voice Recorder information on the lock screen.

Recommendations For Samsung Voice Recorder versions prior to 21.4.15.01 in Android 12 and Android 13, update to version 21.4.15.01 or later. For Samsung Voice Recorder versions prior to 21.4.50.17 in Android 14, update to version 21.4.50.17 or later.

Fix

Related Identifiers

CVE-2023-42577

Affected Products

Android 12

Android 13

Android 14

Samsung Voice Recorder

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2023-42577 · Security Note
• https://osv.dev/vulnerability/CVE-2023-42577 · Vendor Advisory
• https://security.samsungmobile.com/serviceWeb.smsb?year=2023&month=12 · Vendor Advisory
• https://twitter.com/VulmonFeeds/status/1731984821717463140 · Twitter Post
• https://t.me/cvenotify/63150 · Telegram Post
• https://twitter.com/CVEnew/status/1731869106528199018 · Twitter Post