CVE-2023-21446: 
NixOS vulnerability analysis and mitigation

Improper input validation in MyFiles prior to version 12.2.09 in Android R(11), 13.1.03.501 in Android S(12) and 14.1.00.422 in Android T(13) allows local attacker to access data of MyFiles (CVE Database, NVD).

The vulnerability has been assigned a CVSS v3.1 Base Score of 5.5 (Medium) by NVD with vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N. Samsung Mobile assessed it with a slightly higher CVSS score of 6.2 (Medium) with vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N. The vulnerability is classified under CWE-20 (Improper Input Validation) (NVD).

The vulnerability allows local attackers to access data stored in MyFiles application, potentially exposing sensitive user information (NVD).

The vulnerability requires local access to the device and can be exploited without user interaction. The attack complexity is low, but it requires low privileges according to NVD's assessment (NVD).

Users should update their MyFiles application to version 12.2.09 or later for Android R(11), 13.1.03.501 or later for Android S(12), and 14.1.00.422 or later for Android T(13) (Samsung Advisory).