Skip to content
Sign in
6.5 Medium

CVE-2023-42579 Improper usage of insecure protocol (i.e

Description

Improper usage of insecure protocol (i.e. HTTP) in SogouSDK of Chinese Samsung Keyboard prior to versions 5.3.70.1 in Android 11, 5.4.60.49, 5.4.85.5, 5.5.00.58 in Android 12, and 5.6.00.52, 5.6.10.42, 5.7.00.45 in Android 13 allows adjacent attackers to access keystroke data using Man-in-the-Middle attack.

Affected products and versions

Product Affected versions Fixed in
Samsung Keyboard Versions not published

Other CVEs of Samsung Keyboard

The 2 CVEs of Samsung Keyboard →
CVE-2024-20871 Improper authorization vulnerability in Samsung Keyboard prior to version One UI 5.1.1 allows physical attackers to… 4.9 Medium
Track this CVE