← Database

CVE-2023-21466

MEDIUM CVSS: 5.3 Published: 2025-09-03 Modified: 2026-06-17

Description

PendingIntent hijacking vulnerability in CertificatePolicy in framework prior to SMR Apr-2023 Release 1 allows local attackers to access contentProvider without proper permission.

Affected Platforms

Samsung Android

Weakness Type

CWE-287

References