SOC status:Duty analyst on shift

UK Cyber Defence
VulnerabilityModified

CVE-2023-42577

Improper Access Control in Samsung Voice Recorder prior to versions 21.4.15.01 in Android 12 and Android 13, 21.4.50.17 in Android 14 allows physical attackers to access Voice Recorder information on the lock screen.

LOW 2.4EPSS 0.30%

Does this matter?

Lower severity and a low EPSS score (0.30%). Track it; it rarely justifies an emergency change on its own.

Description

Improper Access Control in Samsung Voice Recorder prior to versions 21.4.15.01 in Android 12 and Android 13, 21.4.50.17 in Android 14 allows physical attackers to access Voice Recorder information on the lock screen.

CVSS 3.1
2.4 LOWCVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
EPSS
0.30% probability · 23th percentile
CISA KEV
Not listed
Affected
samsung/samsung voice recorder
Source
mobile.security@samsung.com

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.