CVE-2023-21443

CWE-326 CWE-190 — Integer Overflow4 documents4 sources

Severity

8.8HIGH

EPSS

0.1%

top 81.25%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

Samsung Mobile Samsung Flow FOR Android Samsung Flow

Timeline

PublishedFeb 9

Latest updateMay 3

Description

Improper cryptographic implementation in Samsung Flow for Android prior to version 4.9.04 allows adjacent attackers to decrypt encrypted messages or inject commands.

CVSS vector

CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:HExploitability: 1.6 | Impact: 5.9

Affected Packages2 packages

▶CVEListV5samsung_mobile/samsung_flow_for_androidunspecified — 4.9.04

▶NVDsamsung/flow< 4.9.04

🔴Vulnerability Details

CVEList

CVE-2023-21443: Improper cryptographic implementation in Samsung Flow for Android prior to version 4↗2023-02-09

▶

GHSA

GHSA-ccm6-r4r3-65m2: Improper cryptographic implementation in Samsung Flow for Android prior to version 4↗2023-02-09

▶

📋Vendor Advisories

Red Hat

gstreamer1-plugins-ugly-free: GStreamer RealMedia File Parsing Integer Overflow Remote Code Execution Vulnerability↗2024-05-03

▶