CVE-2023-30730
First published: Wed Sep 06 2023(Updated: )
Implicit intent hijacking vulnerability in Camera prior to versions 11.0.16.43 in Android 11, 12.1.00.30, 12.0.07.53, 12.1.03.10 in Android 12, and 13.0.01.43, 13.1.00.83 in Android 13 allows local attacker to access specific file.
Credit: mobile.security@samsung.com mobile.security@samsung.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Samsung Camera | >=11.0.00.00<11.0.16.43 | |
| Google Android | =11.0 | |
| Samsung Camera | >=12.0.00.00<12.0.07.53 | |
| Samsung Camera | >=12.1.00.00<12.1.00.30 | |
| Samsung Camera | >=12.1.03.00<12.1.03.10 | |
| Google Android | =12.0 | |
| Samsung Camera | <13.0.01.43 | |
| Samsung Camera | >=13.1.00.00<13.1.00.83 | |
| Google Android | =13.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Frequently Asked Questions
What is CVE-2023-30730?
CVE-2023-30730 is an implicit intent hijacking vulnerability in the Camera app on Samsung devices running Android 11, 12, and 13.
How severe is CVE-2023-30730?
CVE-2023-30730 has a severity score of 5.5, which is considered medium severity.
Which software versions are affected by CVE-2023-30730?
Versions 11.0.00.00 to 11.0.16.43, 12.0.00.00 to 12.0.07.53, 12.1.00.00 to 12.1.00.30, 12.1.03.00 12.1.03.10, 13.0.01.43, and 13.1.00.00 to 13.1.00.83 of the Camera app on Samsung devices running Android 11, 12, and 13 are affected.
How can a local attacker exploit CVE-2023-30730?
A local attacker can exploit CVE-2023-30730 to access specific files by leveraging the implicit intent hijacking vulnerability in the Camera app on vulnerable Samsung devices.
Is Google Android 11 and 12 affected by CVE-2023-30730?
No, Google Android 11 and 12 are not affected by CVE-2023-30730.
- agent/severity
- agent/references
- agent/author
- agent/weakness
- agent/type
- agent/event
- agent/description
- agent/last-modified-date
- agent/softwarecombine
- agent/first-publish-date
- agent/tags
- collector/nvd-api
- agent/software-canonical-lookup-request
- collector/nvd-index
- collector/mitre-cve
- source/MITRE
- vendor/samsung
- canonical/samsung camera
- version/samsung camera/11.0.00.00
- vendor/google
- canonical/google android
- version/google android/11.0
- version/samsung camera/12.0.00.00
- version/samsung camera/12.1.00.00
- version/samsung camera/12.1.03.00
- version/google android/12.0
- version/samsung camera/13.1.00.00
- version/google android/13.0