Samsung Bixby Voice vulnerabilities

3 CVEs affecting Samsung Bixby Voice, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2023-42543, published 2023-11-07.

More from Samsung.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2023-42543, published 2023-11-07. High severity, CVSS 7.5. EPSS: 0.5% chance of exploitation in the next 30 days. Improper verification of intent by broadcast receiver vulnerability in Bixby Voice prior to version 3.3.35.12 allows attackers to access arbitrary data with Bixby Voice privilege.
• CVE-2021-25398, published 2021-06-11. Low severity, CVSS 3.3. EPSS: 0.2% chance of exploitation in the next 30 days. Intent redirection vulnerability in Bixby Voice prior to version 3.1.12 allows attacker to access contacts.
• CVE-2021-25352, published 2021-03-25. High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days. Using PendingIntent with implicit intent in Bixby Voice prior to version 3.0.52.14 allows attackers to execute privileged action by hijacking and modifying the intent.