First published: Thu Jul 06 2023(Updated: )
Improper access control in Audio system service prior to SMR Jul-2023 Release 1 allows attacker to send broadcast with system privilege.
Credit: mobile.security@samsung.com
Affected Software | Affected Version | How to fix |
---|---|---|
Samsung Android | =13.0-smr-apr-2023-r1 | |
Samsung Android | =13.0-smr-dec-2022-r1 | |
Samsung Android | =13.0-smr-feb-2023-r1 | |
Samsung Android | =13.0-smr-jan-2023-r1 | |
Samsung Android | =13.0-smr-jun-2023-r1 | |
Samsung Android | =13.0-smr-mar-2023-r1 | |
Samsung Android | =13.0-smr-may-2023-r1 | |
Samsung Android | =13.0-smr-nov-2022-r1 | |
Samsung Android | =13.0-smr-oct-2022-r1 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2023-30667 is a vulnerability related to improper access control in the Audio system service on Samsung Android devices prior to SMR Jul-2023 Release 1.
CVE-2023-30667 has a severity rating of 3.3, which is considered medium.
Samsung Android devices with software versions 13.0-smr-apr-2023-r1, 13.0-smr-dec-2022-r1, 13.0-smr-feb-2023-r1, 13.0-smr-jan-2023-r1, 13.0-smr-jun-2023-r1, 13.0-smr-mar-2023-r1, 13.0-smr-may-2023-r1, 13.0-smr-nov-2022-r1, and 13.0-smr-oct-2022-r1 are affected by CVE-2023-30667.
CVE-2023-30667 allows an attacker to send a broadcast with system privilege, potentially leading to unauthorized access or control of the affected device.
A fix for CVE-2023-30667 can be found in the SMR Jul-2023 Release 1 for Samsung Android devices.