NetSight
medium4.0

CVE-2023-21428

Improper input validation vulnerability in TelephonyUI prior to SMR Jan-2023 Release 1 allows attackers to configure Preferred Call.

Impact

Improper input validation vulnerability in TelephonyUI prior to SMR Jan-2023 Release 1 allows attackers to configure Preferred Call. The patch removes unused code.

Affected products

VendorProductAffected versions
SamsungAndroid
Versions 11.0, 12.0, 13.0

Weakness classification

References