# CVE-2023-21492

Kernel pointers are printed in the log file prior to SMR May-2023 Release 1 allows a privileged local attacker to bypass ASLR.

- Page: https://www.vulneraibility.com/cve/CVE-2023-21492
- CVSS: 4.4
- Known exploited: yes, in CISA KEV since 2023-05-19; CISA due date 2023-06-09
- EPSS: 2.55% (percentile 85.3)
- CISA SSVC: exploitation active, automatable no, technical impact partial (assessed 2025-01-28)
- Weakness: CWE-532
- Published: 2023-05-04

## Affected versions

- Samsung Mobile Samsung Mobile Devices: affected >= Selected Android 11, 12, 13 devices and < SMR May-2023 Release 1

A version outside these ranges is not a statement that it is unaffected.

## References

- [other] https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=05
- [other] https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-21492

---
Summary, impact and action are written by the vulneraibility.com AI analysis pipeline from the CVE record, NVD, CISA and FIRST data; verify against the references.