Improper input validation vulnerability in FileProviderStatusReceiver in Samsung Keyboard prior to SMR Sep-2023 Release 1 allows local attackers to delete arbitrary files with Samsung Keyboard privilege.
Attack Vector Local
Attack Complexity Low
Privileges Required Low
Scope Unchanged
Confidentiality Impact None
Integrity Impact High
Availability Impact High
User Interaction None
No CVSS v3.0
No CVSS v2
Vendors | Products |
---|---|
Samsung |
|
Configuration 1 [-]
|
References
Link | Resource |
---|---|
https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=09 | Vendor Advisory |
History
No history.
MITRE Information
Status: PUBLISHED
Assigner: Samsung Mobile
Published: 2023-09-06T03:11:53.437Z
Updated: 2023-09-06T03:11:53.437Z
Reserved: 2023-04-14T01:59:51.129Z
Link: CVE-2023-30707
JSON object: View
NVD Information
Status : Modified
Published: 2023-09-06T04:15:11.520
Modified: 2023-11-07T04:13:58.830
Link: CVE-2023-30707
JSON object: View
Redhat Information
No data.
CWE