CVE-2023-42539

Summary

PendingIntent hijacking vulnerability in ChallengeNotificationManager in Samsung Health prior to version 6.25 allows local attackers to access data.

Affected Software

VendorProductVersion RangeStatus
Samsung MobileSamsung Health6.25unaffected

Weaknesses

  • CWE-284: Improper Access Control

ADP Enrichment

CVE Program Container

Additional References

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: partial

References