CVE-2023-21479
Published Sep 3, 2025
·Updated
Improper authorization in Smart suggestions prior to SMR Apr-2023 Release 1 in Android 13 and 4.1.01.0 in Android 12 allows remote attackers to register a schedule.
Affected Software
21 affected components
Android Smart suggestions<SMR Apr-2023 Release 1
Android Android<13, <4.1.01.0
Samsung Android=13.0-smr-apr-2022-r1
Samsung Android=13.0-smr-aug-2022-r1
Samsung Android=13.0-smr-dec-2021-r1
Samsung Android=13.0-smr-dec-2022-r1
Samsung Android=13.0-smr-feb-2022-r1
Samsung Android=13.0-smr-feb-2023-r1
Samsung Android=13.0-smr-jan-2022-r1
Samsung Android=13.0-smr-jan-2023-r1
Samsung Android=13.0-smr-jul-2022-r1
Samsung Android=13.0-smr-jun-2022-r1
Samsung Android=13.0-smr-mar-2022-r1
Samsung Android=13.0-smr-mar-2023-r1
Samsung Android=13.0-smr-may-2022-r1
Samsung Android=13.0-smr-nov-2021-r1
Samsung Android=13.0-smr-nov-2022-r1
Samsung Android=13.0-smr-oct-2022-r1
Samsung Android=13.0-smr-sep-2022-r1
All of the following
Samsung Smart Suggestions=4.1.01.0
Samsung Android=12.0
Event History
Sep 3, 2025
CVE Published
via MITRE·05:17 AM
Data Sourced
via MITRE·05:17 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·06:15 AM
DescriptionSeverityAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2023-21479?
The severity of CVE-2023-21479 is considered high due to improper authorization allowing remote attackers to register schedules.
2
How do I fix CVE-2023-21479?
To fix CVE-2023-21479, update your Android device to the latest software version that addresses this vulnerability.
3
What versions are affected by CVE-2023-21479?
CVE-2023-21479 affects Android 12 (up to version 4.1.01.0) and Android 13 (up to SMR Apr-2023 Release 1).
4
Can CVE-2023-21479 be exploited remotely?
Yes, CVE-2023-21479 can be exploited remotely due to improper authorization in Smart suggestions.
5
What impact does CVE-2023-21479 have?
The impact of CVE-2023-21479 allows unauthorized schedule registration, potentially compromising user control over device functions.