Samsung Security Bulletin: Fixes for SVE-2022-2106/2304/2610/2744 (CVE-2023-21462-21465) in Android Apps

Critical Vulnerability Information MAR-2023 Updates Android Applications Updates 1. SVE-2022-2106 (CVE-2023-21462): Sensitive Information Exposure in Quick Share Agent - Severity: Medium - Fixed Versions: 3.5.14.18 (Android 12) and 3.5.16.20 (Android 13) - Report Date: September 3, 2022 - Description: A sensitive information exposure vulnerability in Quick Share Agent prior to versions 3.5.14.18 (Android 12) and 3.5.16.20 (Android 13) allows a local attacker to access MAC addresses without the required permissions. 2. SVE-2022-2304 (CVE-2023-21463): Improper Access Control in MyFiles Application - Severity: Medium - Fixed Versions: 12.2.09.0 (Android 11), 13.1.03.501 (Android 12), and 14.1.03.0 (Android 13) - Report Date: September 18, 2022 - Description: An improper access control vulnerability in the MyFiles application prior to versions 12.2.09.0 (Android 11), 13.1.03.501 (Android 12), and 14.1.03.0 (Android 13) allows a local attacker to obtain sensitive information from Samsung Internet's Secret Mode under specific conditions. 3. SVE-2022-2610 (CVE-2023-21465): Improper Access Control in Bixby Touch - Severity: Medium - Fixed Version: 3.2.02.5 - Report Date: November 3, 2022 - Description: An improper access control vulnerability in Bixby Touch for Chinese models prior to version 3.2.02.5 allows untrusted applications to access local files. 4. SVE-2022-2744 (CVE-2023-21464): Improper Access Control in Samsung Calendar - Severity: Medium - Fixed Versions: 12.4.02.9000 (Android 13) and 12.3.08.2000 (Android 12) - Report Date: November 22, 2022 - Description: An improper access control vulnerability in Samsung Calendar prior to versions 12.4.02.9000 (Android 13) and 12.3.08.2000 (Android 12) allows a local attacker to configure incorrect states.

Goal Reached Thanks to every supporter — we hit 100%!

Samsung Security Bulletin: Fixes for SVE-2022-2106/2304/2610/2744 (CVE-2023-21462-21465) in Android Apps