PT-2025-35671 · Google · Android 12+2

Published 2025-09-03 · Updated 2026-01-28 · CVE-2023-21479

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Name of the Vulnerable Software and Affected Versions Android versions prior to SMR Apr-2023 Release 1 Android 13 versions prior to SMR Apr-2023 Release 1 Android 12 version 4.1.01.0

Description Improper authorization in Smart suggestions allows remote attackers to register a schedule.

Recommendations Update Android to SMR Apr-2023 Release 1 or later. Update Android 12 to a version later than 4.1.01.0.

Fix

Related Identifiers

CVE-2023-21479

Affected Products

Android

Android 12

Android 13

References · 7

• https://osv.dev/vulnerability/CVE-2023-21479 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-21479 · Security Note
• https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=04 · Vendor Advisory
• https://twitter.com/CVEnew/status/1963112915164447033 · Twitter Post
• https://t.me/CVEtracker/31550 · Telegram Post
• https://t.me/cveNotify/150195 · Telegram Post
• https://twitter.com/VulmonFeeds/status/1963238953655353779 · Twitter Post