Improper Input Validation in Exynos Fastboot USB Interface by Samsung
CVE-2023-21472

6.8MEDIUM

Key Information:

Vendor

Samsung
Status
Samsung Devices
Vendor
CVE Published:
3 September 2025

What is CVE-2023-21472?

The Exynos Fastboot USB Interface prior to the SMR Apr-2023 Release 1 has a vulnerability stemming from improper input validation. This issue allows physical attackers to execute arbitrary code within the bootloader, potentially compromising the device's security. It is crucial for users of affected Samsung products to update their systems to the latest security patches to mitigate the risks associated with this vulnerability.

Affected Version(s)

Samsung Mobile Devices SMR Apr-2023 Release in Selected Android 11, 12, 13 Exynos devices

References

https://security.samsungmobile.com/securityUpdate.smsb?ye...

CVSS V3.1

Score:
6.8
Severity:
MEDIUM
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Physical
Attack Complexity:
High
Privileges Required:
High
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.
CVE-2023-21472 : Improper Input Validation in Exynos Fastboot USB Interface by Samsung