CVE-2023-30707: Input Validation

Published Sep 6, 2023

Updated

Improper input validation vulnerability in FileProviderStatusReceiver in Samsung Keyboard prior to SMR Sep-2023 Release 1 allows local attackers to delete arbitrary files with Samsung Keyboard privilege.

Affected Software

69 affected components

Samsung android=11.0

Samsung android=11.0-smr-apr-2021-r1

Samsung android=11.0-smr-apr-2022-r1

Samsung android=11.0-smr-apr-2023-r1

Samsung android=11.0-smr-aug-2021-r1

Samsung android=11.0-smr-aug-2022-r1

Samsung android=11.0-smr-aug-2023-r1

Samsung android=11.0-smr-dec-2020-r1

Samsung android=11.0-smr-dec-2021-r1

Samsung android=11.0-smr-dec-2022-r1

Samsung android=11.0-smr-feb-2021-r1

Samsung android=11.0-smr-feb-2022-r1

Samsung android=11.0-smr-feb-2023-r1

Samsung android=11.0-smr-jan-2021-r1

Samsung android=11.0-smr-jan-2022-r1

Samsung android=11.0-smr-jan-2023-r1

Samsung android=11.0-smr-jul-2021-r1

Samsung android=11.0-smr-jul-2022-r1

Samsung android=11.0-smr-jul-2023-r1

Samsung android=11.0-smr-jun-2021-r1

Samsung android=11.0-smr-jun-2022-r1

Samsung android=11.0-smr-jun-2023-r1

Samsung android=11.0-smr-mar-2021-r1

Samsung android=11.0-smr-mar-2022-r1

Samsung android=11.0-smr-mar-2023-r1

Samsung android=11.0-smr-may-2021-r1

Samsung android=11.0-smr-may-2022-r1

Samsung android=11.0-smr-may-2023-r1

Samsung android=11.0-smr-nov-2021-r1

Samsung android=11.0-smr-nov-2022-r1

Samsung android=11.0-smr-oct-2021-r1

Samsung android=11.0-smr-oct-2022-r1

Samsung android=11.0-smr-sep-2021-r1

Samsung android=11.0-smr-sep-2022-r1

Samsung android=12.0

Samsung android=12.0-smr-apr-2022-r1

Samsung android=12.0-smr-apr-2023-r1

Samsung android=12.0-smr-aug-2022-r1

Samsung android=12.0-smr-aug-2023-r1

Samsung android=12.0-smr-dec-2021-r1

Samsung android=12.0-smr-dec-2022-r1

Samsung android=12.0-smr-feb-2022-r1

Samsung android=12.0-smr-feb-2023-r1

Samsung android=12.0-smr-jan-2022-r1

Samsung android=12.0-smr-jan-2023-r1

Samsung android=12.0-smr-jul-2022-r1

Samsung android=12.0-smr-jul-2023-r1

Samsung android=12.0-smr-jun-2022-r1

Samsung android=12.0-smr-jun-2023-r1

Samsung android=12.0-smr-mar-2022-r1

Samsung android=12.0-smr-mar-2023-r1

Samsung android=12.0-smr-may-2022-r1

Samsung android=12.0-smr-may-2023-r1

Samsung android=12.0-smr-nov-2021-r1

Samsung android=12.0-smr-nov-2022-r1

Samsung android=12.0-smr-oct-2022-r1

Samsung android=12.0-smr-sep-2022-r1

Samsung android=13.0

Samsung android=13.0-smr-apr-2023-r1

Samsung android=13.0-smr-aug-2023-r1

Samsung android=13.0-smr-dec-2022-r1

Samsung android=13.0-smr-feb-2023-r1

Samsung android=13.0-smr-jan-2023-r1

Samsung android=13.0-smr-jul-2023-r1

Samsung android=13.0-smr-jun-2023-r1

Samsung android=13.0-smr-mar-2023-r1

Samsung android=13.0-smr-may-2023-r1

Samsung android=13.0-smr-nov-2022-r1

Samsung android=13.0-smr-oct-2022-r1

Event History

Sep 6, 2023

CVE Published

via MITRE·03:11 AM

Data Sourced

via MITRE·03:11 AM

DescriptionSeverityWeakness

Frequently Asked Questions

What is the severity of CVE-2023-30707?

CVE-2023-30707 is considered a critical vulnerability as it allows local attackers to delete arbitrary files via improper input validation.

How do I fix CVE-2023-30707?

To remediate CVE-2023-30707, users should update their Samsung Keyboard application to the latest version available in the system updates.

Which versions of Samsung Android are affected by CVE-2023-30707?

CVE-2023-30707 affects Samsung Android versions 11.0 and specific security maintenance releases prior to September 2023.

Who can exploit CVE-2023-30707?

Local attackers with access to the device can exploit CVE-2023-30707 to delete arbitrary files using Samsung Keyboard privileges.

Are there any workarounds for CVE-2023-30707 before applying a fix?

Currently, there are no effective workarounds for CVE-2023-30707, and upgrading the application is the recommended course of action.