NetSight
medium4.0

CVE-2023-21470

Improper access control vulnerability in SLocation prior to SMR Apr-2022 Release 1 allows local attackers to get device location information using com.samsung.…

Impact

Improper access control vulnerability in SLocation prior to SMR Apr-2022 Release 1 allows local attackers to get device location information using com.samsung.android.wifi.NETWORK_LOCATION action.

Affected products

VendorProductAffected versions
SamsungAndroid
Versions 11.0, 12.0, 13.0

References