CVE-2023-21462

published 2023-03-16

CVE-2023-21462: The sensitive information exposure vulnerability in Quick Share Agent prior to versions 3.5.14.18 in Android 12 and 3.5.16.20 in Android 13 allows to local…

Priority P4 9 low 3.3 CVSS 3.1

AV L AC L PR L UI N S U C L I N A N

The sensitive information exposure vulnerability in Quick Share Agent prior to versions 3.5.14.18 in Android 12 and 3.5.16.20 in Android 13 allows to local attacker to access MAC address without related permission.

Affected

3 ranges

Vendor	Product	Version range	Fixed in
samsung	quick_share	< 3.5.14.18	3.5.14.18
samsung	quick_share	< 3.5.16.20	3.5.16.20
samsung_mobile	quick_share_agent	>= unspecified < 3.5.14.18 in Android 12 and 3.5.16.20 in Android 13	3.5.14.18 in Android 12 and 3.5.16.20 in Android 13

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-215