description: Improper Access Control in Samsung Voice Recorder prior to versions 21.4.15.01 in Android 12 and Android 13, 21.4.50.17 in Android 14 allows physical attackers to access Voice Recorder information on the lock screen.
problem types: CWE-284: Improper Access Control
affected:
{
vendor: Samsung Mobile
product: Samsung Voice Recorder
versions:
status: unaffected, version: 21.4.15.01 in Android 12 and Android 13, 21.4.50.17 in Android 14
defaultStatus: affected
}
metrics:
format: CVSS
cvssV3_1: [
version: 3.1
attackVector: PHYSICAL
attackComplexity: LOW
privilegesRequired: NONE
userInteraction: NONE
scope: UNCHANGED
confidentialityImpact: HIGH
integrityImpact: HIGH
availabilityImpact: HIGH
baseSeverity: MEDIUM
baseScore: 6.8
vectorString: CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
]