CVE-2023-21426

MEDIUM CVSS: 4.3 Published: 2023-02-09 Modified: 2026-06-17

Description

Hardcoded AES key to encrypt cardemulation PINs in NFC prior to SMR Jan-2023 Release 1 allows attackers to access cardemulation PIN.

Affected Platforms

Samsung Android

Weakness Type

CWE-798, CWE-798

References