CVE-2023-21445

—

CVSS 3.1

7.8 high

EPSS

<1%p8

Published

Feb 9, 2023 (Feb 9, 2023)

Modified

Jun 17, 2026

Description

Improper access control vulnerability in MyFiles prior to versions 12.2.09 in Android R(11), 13.1.03.501 in Android S(12) and 14.1.00.422 in Android T(13) allows local attacker to write file with MyFiles privilege via implicit intent.

Vendors: samsung
Products: android
Weakness: CWE-284, CWE-668
Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (0.2%)

In the news0 stories

No ingested article mentions this CVE yet.