CVE-2023-30661: Infoleak
First published: Thu Jul 06 2023(Updated: )
Exposure of Sensitive Information vulnerability in getChipInfos in UwbAospAdapterService prior to SMR Jul-2023 Release 1 allows local attackers to access the UWB chipset Identifier.
Credit: mobile.security@samsung.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Samsung Android | =12.0-smr-apr-2022-r1 | |
| Samsung Android | =12.0-smr-apr-2023-r1 | |
| Samsung Android | =12.0-smr-aug-2022-r1 | |
| Samsung Android | =12.0-smr-dec-2021-r1 | |
| Samsung Android | =12.0-smr-dec-2022-r1 | |
| Samsung Android | =12.0-smr-feb-2022-r1 | |
| Samsung Android | =12.0-smr-feb-2023-r1 | |
| Samsung Android | =12.0-smr-jan-2022-r1 | |
| Samsung Android | =12.0-smr-jan-2023-r1 | |
| Samsung Android | =12.0-smr-jul-2022-r1 | |
| Samsung Android | =12.0-smr-jun-2022-r1 | |
| Samsung Android | =12.0-smr-jun-2023-r1 | |
| Samsung Android | =12.0-smr-mar-2022-r1 | |
| Samsung Android | =12.0-smr-mar-2023-r1 | |
| Samsung Android | =12.0-smr-may-2022-r1 | |
| Samsung Android | =12.0-smr-may-2023-r1 | |
| Samsung Android | =12.0-smr-nov-2021-r1 | |
| Samsung Android | =12.0-smr-nov-2022-r1 | |
| Samsung Android | =12.0-smr-oct-2022-r1 | |
| Samsung Android | =12.0-smr-sep-2022-r1 | |
| Samsung Android | =13.0-smr-apr-2023-r1 | |
| Samsung Android | =13.0-smr-dec-2022-r1 | |
| Samsung Android | =13.0-smr-feb-2023-r1 | |
| Samsung Android | =13.0-smr-jan-2023-r1 | |
| Samsung Android | =13.0-smr-jun-2023-r1 | |
| Samsung Android | =13.0-smr-mar-2023-r1 | |
| Samsung Android | =13.0-smr-may-2023-r1 | |
| Samsung Android | =13.0-smr-nov-2022-r1 | |
| Samsung Android | =13.0-smr-oct-2022-r1 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Frequently Asked Questions
What is the vulnerability ID of this vulnerability?
The vulnerability ID is CVE-2023-30661.
What is the severity rating of the vulnerability?
The severity rating of the vulnerability is medium with a value of 5.5.
How can local attackers exploit this vulnerability?
Local attackers can exploit this vulnerability by accessing the UWB chipset Identifier through the getChipInfos function in UwbAospAdapterService.
Which versions of Samsung Android are affected by this vulnerability?
Samsung Android versions 12.0 and 13.0 with various SMR releases are affected by this vulnerability.
How can I fix this vulnerability?
To fix this vulnerability, update your Samsung Android device to the SMR Jul-2023 Release 1 or the latest security update.
- collector/nvd-index
- agent/weakness
- agent/references
- agent/severity
- agent/author
- agent/description
- agent/type
- agent/event
- agent/softwarecombine
- agent/last-modified-date
- agent/first-publish-date
- agent/tags
- collector/mitre-cve
- source/MITRE
- vendor/samsung
- canonical/samsung android
- version/samsung android/12.0-smr-apr-2022-r1
- version/samsung android/12.0-smr-apr-2023-r1
- version/samsung android/12.0-smr-aug-2022-r1
- version/samsung android/12.0-smr-dec-2021-r1
- version/samsung android/12.0-smr-dec-2022-r1
- version/samsung android/12.0-smr-feb-2022-r1
- version/samsung android/12.0-smr-feb-2023-r1
- version/samsung android/12.0-smr-jan-2022-r1
- version/samsung android/12.0-smr-jan-2023-r1
- version/samsung android/12.0-smr-jul-2022-r1
- version/samsung android/12.0-smr-jun-2022-r1
- version/samsung android/12.0-smr-jun-2023-r1
- version/samsung android/12.0-smr-mar-2022-r1
- version/samsung android/12.0-smr-mar-2023-r1
- version/samsung android/12.0-smr-may-2022-r1
- version/samsung android/12.0-smr-may-2023-r1
- version/samsung android/12.0-smr-nov-2021-r1
- version/samsung android/12.0-smr-nov-2022-r1
- version/samsung android/12.0-smr-oct-2022-r1
- version/samsung android/12.0-smr-sep-2022-r1
- version/samsung android/13.0-smr-apr-2023-r1
- version/samsung android/13.0-smr-dec-2022-r1
- version/samsung android/13.0-smr-feb-2023-r1
- version/samsung android/13.0-smr-jan-2023-r1
- version/samsung android/13.0-smr-jun-2023-r1
- version/samsung android/13.0-smr-mar-2023-r1
- version/samsung android/13.0-smr-may-2023-r1
- version/samsung android/13.0-smr-nov-2022-r1
- version/samsung android/13.0-smr-oct-2022-r1