Improper Authorization in AutoPowerOnOffConfirmDialog for Samsung Devices

CVE-2023-21461

What is CVE-2023-21461?

An improper authorization vulnerability exists in the AutoPowerOnOffConfirmDialog within Samsung devices. This flaw allows a local attacker to turn off the device via an unprotected activity, posing significant security risks to users. Devices affected are those prior to the SMR March 2023 Release 1, and users are advised to update their firmware promptly to mitigate potential exploitation risks.

References