CVE-2013-4764

4.3 mediumEPSS 0.3%

Samsung Galaxy S3/S4 exposes an unprotected component allowing an unprivileged app to send arbitrary SMS texts to arbitrary destinations without permission.

Severity

CVSS 3.1

4.3 medium

CVSS:3.1/AV:P/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

EPSS: 0.3% chance of exploitation in the next 30 days; higher than 22% of CVEs (scores of 2026-10-31)
CWE: CWE-276
Published: 2019-12-27
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

samsung:galaxy_s3_firmware
samsung:galaxy_s4_firmware

References

http://shouji.360.cn/securityReportlist/CVE-2013-4764.html
https://seclists.org/bugtraq/2013/Jul/107
http://shouji.360.cn/securityReportlist/CVE-2013-4764.html
https://seclists.org/bugtraq/2013/Jul/107

Check your stack JSON