CVE-2023-21442: Medium severity samsung android vulnerability
Improper access control vulnerability in Runestone application prior to version 2.9.09.003 in Android R(11) and 3.2.01.007 in Android S(12) allows local attackers to get device location information.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2023-21442?
CVE-2023-21442 is classified as a moderate severity vulnerability due to improper access control allowing local attackers to access device location information.
How do I fix CVE-2023-21442?
To fix CVE-2023-21442, update the Runestone application to version 2.9.09.003 or later on Android R (11) and version 3.2.01.007 or later on Android S (12).
What versions of Android are affected by CVE-2023-21442?
CVE-2023-21442 affects Samsung Android devices running versions prior to 11.0 and 12.0 based on the Runestone application version.
Who is affected by CVE-2023-21442?
Users of the Runestone application on Samsung devices using Android versions prior to 2.9.09.003 for Android R and 3.2.01.007 for Android S are affected by CVE-2023-21442.
What kind of attacks can CVE-2023-21442 enable?
CVE-2023-21442 can enable local attackers to retrieve sensitive device location information without proper authorization.