Improper Input Validation in TIGERF Trustlet by Samsung
CVE-2023-21478

6MEDIUM

Key Information:

Vendor

Samsung
Status
Samsung Devices
Vendor
CVE Published:
3 September 2025

What is CVE-2023-21478?

An improper input validation vulnerability exists in the TIGERF trustlet prior to the SMR Apr-2023 Release 1, allowing local attackers to potentially gain unauthorized access to protected data. This flaw can be exploited to expose sensitive information, highlighting the importance of secure coding practices and regular updates to safeguard user data.

Affected Version(s)

Samsung Mobile Devices SMR Apr-2023 Release in Android 11, 12, 13

References

https://security.samsungmobile.com/securityUpdate.smsb?ye...

CVSS V3.1

Score:
6
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.
CVE-2023-21478 : Improper Input Validation in TIGERF Trustlet by Samsung