Apply updates per vendor instructions.
Evidence dossier
CVE-2023-21492
CVE-2023-21492
54.2–69.2Priority evidence range
gen-56ccdaf9Normalized restatement
Kernel pointers are printed in the log file prior to SMR May-2023 Release 1 allows a privileged local attacker to bypass ASLR.
- State
- PUBLISHED
- Published
- May 4, 2023
- Updated
- Oct 21, 2025
- Evidence coverage
- 85%
2026-07-18 · v2026.06.15 · percentile 83.3%
Distinct CVSS assessments remain side by side; none are averaged.
Source comparison
Who said what
Samsung Mobileoriginal assertion
container
Kernel pointers are printed in the log file prior to SMR May-2023 Release 1 allows a privileged local attacker to bypass ASLR.
Jul 19, 2026Original evidence ↗
CISA KEVoriginal assertion
observed_exploitation
Samsung Mobile Devices Insertion of Sensitive Information Into Log File Vulnerability
Jul 19, 2026Original evidence ↗
FIRST EPSSoriginal assertion
model_probability
Probability 0.025540000000; percentile 0.832980000000
Jul 19, 2026Original evidence ↗
Applicability
Cited product scope
Samsung MobileSamsung Mobile Devices
[{"status": "affected", "version": "Selected Android 11, 12, 13 devices", "lessThan": "SMR May-2023 Release 1", "versionType": "custom"}]unknownUnknown vendorUnknown product
cpe:2.3:o:samsung:android:11.0:-:*:*:*:*:*:*supportedUnknown vendorUnknown product
cpe:2.3:o:samsung:android:11.0:smr-apr-2021-r1:*:*:*:*:*:*supportedUnknown vendorUnknown product
cpe:2.3:o:samsung:android:11.0:smr-apr-2022-r1:*:*:*:*:*:*supportedUnknown vendorUnknown product
cpe:2.3:o:samsung:android:11.0:smr-apr-2023-r1:*:*:*:*:*:*supportedUnknown vendorUnknown product
cpe:2.3:o:samsung:android:11.0:smr-aug-2021-r1:*:*:*:*:*:*supportedUnknown vendorUnknown product
cpe:2.3:o:samsung:android:11.0:smr-aug-2022-r1:*:*:*:*:*:*supportedUnknown vendorUnknown product
cpe:2.3:o:samsung:android:11.0:smr-dec-2020-r1:*:*:*:*:*:*supportedUnknown vendorUnknown product
cpe:2.3:o:samsung:android:11.0:smr-dec-2021-r1:*:*:*:*:*:*supportedUnknown vendorUnknown product
cpe:2.3:o:samsung:android:11.0:smr-dec-2022-r1:*:*:*:*:*:*supportedUnknown vendorUnknown product
cpe:2.3:o:samsung:android:11.0:smr-feb-2021-r1:*:*:*:*:*:*supportedUnknown vendorUnknown product
cpe:2.3:o:samsung:android:11.0:smr-feb-2022-r1:*:*:*:*:*:*supportedUnknown vendorUnknown product
cpe:2.3:o:samsung:android:11.0:smr-feb-2023-r1:*:*:*:*:*:*supportedUnknown vendorUnknown product
cpe:2.3:o:samsung:android:11.0:smr-jan-2021-r1:*:*:*:*:*:*supportedUnknown vendorUnknown product
cpe:2.3:o:samsung:android:11.0:smr-jan-2022-r1:*:*:*:*:*:*supportedUnknown vendorUnknown product
cpe:2.3:o:samsung:android:11.0:smr-jan-2023-r1:*:*:*:*:*:*supportedUnknown vendorUnknown product
cpe:2.3:o:samsung:android:11.0:smr-jul-2021-r1:*:*:*:*:*:*supportedUnknown vendorUnknown product
cpe:2.3:o:samsung:android:11.0:smr-jul-2022-r1:*:*:*:*:*:*supportedUnknown vendorUnknown product
cpe:2.3:o:samsung:android:11.0:smr-jun-2021-r1:*:*:*:*:*:*supportedUnknown vendorUnknown product
cpe:2.3:o:samsung:android:11.0:smr-jun-2022-r1:*:*:*:*:*:*supportedUnknown vendorUnknown product
cpe:2.3:o:samsung:android:11.0:smr-mar-2021-r1:*:*:*:*:*:*supportedUnknown vendorUnknown product
cpe:2.3:o:samsung:android:11.0:smr-mar-2022-r1:*:*:*:*:*:*supportedUnknown vendorUnknown product
cpe:2.3:o:samsung:android:11.0:smr-mar-2023-r1:*:*:*:*:*:*supportedUnknown vendorUnknown product
cpe:2.3:o:samsung:android:11.0:smr-may-2021-r1:*:*:*:*:*:*supportedUnknown vendorUnknown product
cpe:2.3:o:samsung:android:11.0:smr-may-2022-r1:*:*:*:*:*:*supportedUnknown vendorUnknown product
cpe:2.3:o:samsung:android:11.0:smr-nov-2021-r1:*:*:*:*:*:*supportedUnknown vendorUnknown product
cpe:2.3:o:samsung:android:11.0:smr-nov-2022-r1:*:*:*:*:*:*supportedUnknown vendorUnknown product
cpe:2.3:o:samsung:android:11.0:smr-oct-2021-r1:*:*:*:*:*:*supportedUnknown vendorUnknown product
cpe:2.3:o:samsung:android:11.0:smr-oct-2022-r1:*:*:*:*:*:*supportedUnknown vendorUnknown product
cpe:2.3:o:samsung:android:11.0:smr-sep-2021-r1:*:*:*:*:*:*supportedUnknown vendorUnknown product
cpe:2.3:o:samsung:android:11.0:smr-sep-2022-r1:*:*:*:*:*:*supportedUnknown vendorUnknown product
cpe:2.3:o:samsung:android:12.0:-:*:*:*:*:*:*supportedUnknown vendorUnknown product
cpe:2.3:o:samsung:android:12.0:smr-apr-2022-r1:*:*:*:*:*:*supportedUnknown vendorUnknown product
cpe:2.3:o:samsung:android:12.0:smr-apr-2023-r1:*:*:*:*:*:*supportedUnknown vendorUnknown product
cpe:2.3:o:samsung:android:12.0:smr-aug-2022-r1:*:*:*:*:*:*supportedUnknown vendorUnknown product
cpe:2.3:o:samsung:android:12.0:smr-dec-2021-r1:*:*:*:*:*:*supportedUnknown vendorUnknown product
cpe:2.3:o:samsung:android:12.0:smr-dec-2022-r1:*:*:*:*:*:*supportedUnknown vendorUnknown product
cpe:2.3:o:samsung:android:12.0:smr-feb-2022-r1:*:*:*:*:*:*supportedUnknown vendorUnknown product
cpe:2.3:o:samsung:android:12.0:smr-feb-2023-r1:*:*:*:*:*:*supportedUnknown vendorUnknown product
cpe:2.3:o:samsung:android:12.0:smr-jan-2022-r1:*:*:*:*:*:*supportedUnknown vendorUnknown product
cpe:2.3:o:samsung:android:12.0:smr-jan-2023-r1:*:*:*:*:*:*supportedUnknown vendorUnknown product
cpe:2.3:o:samsung:android:12.0:smr-jul-2022-r1:*:*:*:*:*:*supportedUnknown vendorUnknown product
cpe:2.3:o:samsung:android:12.0:smr-jun-2022-r1:*:*:*:*:*:*supportedUnknown vendorUnknown product
cpe:2.3:o:samsung:android:12.0:smr-mar-2022-r1:*:*:*:*:*:*supportedUnknown vendorUnknown product
cpe:2.3:o:samsung:android:12.0:smr-mar-2023-r1:*:*:*:*:*:*supportedUnknown vendorUnknown product
cpe:2.3:o:samsung:android:12.0:smr-may-2022-r1:*:*:*:*:*:*supportedUnknown vendorUnknown product
cpe:2.3:o:samsung:android:12.0:smr-nov-2021-r1:*:*:*:*:*:*supportedUnknown vendorUnknown product
cpe:2.3:o:samsung:android:12.0:smr-nov-2022-r1:*:*:*:*:*:*supportedUnknown vendorUnknown product
cpe:2.3:o:samsung:android:12.0:smr-oct-2022-r1:*:*:*:*:*:*supportedUnknown vendorUnknown product
cpe:2.3:o:samsung:android:12.0:smr-sep-2022-r1:*:*:*:*:*:*supportedUnknown vendorUnknown product
cpe:2.3:o:samsung:android:13.0:-:*:*:*:*:*:*supportedUnknown vendorUnknown product
cpe:2.3:o:samsung:android:13.0:smr-apr-2022-r1:*:*:*:*:*:*supportedUnknown vendorUnknown product
cpe:2.3:o:samsung:android:13.0:smr-apr-2023-r1:*:*:*:*:*:*supportedUnknown vendorUnknown product
cpe:2.3:o:samsung:android:13.0:smr-aug-2022-r1:*:*:*:*:*:*supportedUnknown vendorUnknown product
cpe:2.3:o:samsung:android:13.0:smr-dec-2021-r1:*:*:*:*:*:*supportedUnknown vendorUnknown product
cpe:2.3:o:samsung:android:13.0:smr-dec-2022-r1:*:*:*:*:*:*supportedUnknown vendorUnknown product
cpe:2.3:o:samsung:android:13.0:smr-feb-2022-r1:*:*:*:*:*:*supportedUnknown vendorUnknown product
cpe:2.3:o:samsung:android:13.0:smr-feb-2023-r1:*:*:*:*:*:*supportedUnknown vendorUnknown product
cpe:2.3:o:samsung:android:13.0:smr-jan-2022-r1:*:*:*:*:*:*supportedUnknown vendorUnknown product
cpe:2.3:o:samsung:android:13.0:smr-jan-2023-r1:*:*:*:*:*:*supportedUnknown vendorUnknown product
cpe:2.3:o:samsung:android:13.0:smr-jul-2022-r1:*:*:*:*:*:*supportedUnknown vendorUnknown product
cpe:2.3:o:samsung:android:13.0:smr-jun-2022-r1:*:*:*:*:*:*supportedUnknown vendorUnknown product
cpe:2.3:o:samsung:android:13.0:smr-mar-2022-r1:*:*:*:*:*:*supportedUnknown vendorUnknown product
cpe:2.3:o:samsung:android:13.0:smr-mar-2023-r1:*:*:*:*:*:*supportedUnknown vendorUnknown product
cpe:2.3:o:samsung:android:13.0:smr-may-2022-r1:*:*:*:*:*:*supportedUnknown vendorUnknown product
cpe:2.3:o:samsung:android:13.0:smr-nov-2021-r1:*:*:*:*:*:*supportedUnknown vendorUnknown product
cpe:2.3:o:samsung:android:13.0:smr-nov-2022-r1:*:*:*:*:*:*supportedUnknown vendorUnknown product
cpe:2.3:o:samsung:android:13.0:smr-oct-2022-r1:*:*:*:*:*:*supportedUnknown vendorUnknown product
cpe:2.3:o:samsung:android:13.0:smr-sep-2022-r1:*:*:*:*:*:*supportedAssessments
CVSS by origin
nvd@nist.govCVSS 3.1 · role Primary
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:Nmobile.security@samsung.comCVSS 3.1 · role Secondary
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:NSamsung MobileCVSS 3.1 · role unknown
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:NLimitations and unknowns
- KEV membership is authoritative for the catalog, not proof of exposure in any environment.
- EPSS is a dated model probability and not an individual-environment prediction.
- Affected or fixed status applies only to the exact cited product and version scope; unresolved scope remains unknown.
- NVD-carried upstream facts remain derivative and are not independent corroboration.
- Only NVD metrics validated under the generation-bound calculator are Public Priority eligible; direct CVE record metrics remain display-only.
- NVD CVSS source eligibility is closed: NVD-authored, exact record-source, or registered same-CVE container origin; unmapped sources remain display-only.
- Factor D is unknown in Public Core because no accepted canonical mapping-obligation ledger is present.
- Core replay supports the active and immediately prior generation; retrospective valid-at replay is deferred.