CVE-2023-21431 — Improper Input Validation in Mobile Bixby Vision

CWE-20 — Improper Input Validation3 documents3 sources
Severity
3.3LOWNVD
EPSS
0.1%
top 78.81%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Samsung Mobile Bixby VisionSamsung Bixby Vision
Timeline
PublishedFeb 9

Description

Improper input validation in Bixby Vision prior to version 3.7.70.17 allows attacker to access data of Bixby Vision.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:NExploitability: 1.8 | Impact: 1.4

Affected Packages2 packages

▶NVDsamsung/bixby_vision< 3.7.70.17
▶CVEListV5samsung_mobile/bixby_visionunspecified — 3.7.70.17

🔴Vulnerability Details

2
CVEList
CVE-2023-21431: Improper input validation in Bixby Vision prior to version 3↗2023-02-09
▶
GHSA
GHSA-f6pr-mh69-f34j: Improper input validation in Bixby Vision prior to version 3↗2023-02-09
▶
CVE-2023-21431 — Improper Input Validation | cvebase