CVE-2016-11030: Buffer Overflow

Published Apr 7, 2020

Updated

An issue was discovered on Samsung mobile devices with KK(4.4), L(5.0/5.1), and M(6.0) (with Hrm sensor support) software. The sysfs of the MAX86902 sensor driver does not prevent concurrent access, leading to a race condition and resultant heap-based buffer overflow. The Samsung ID is SVE-2016-7341 (December 2016).

Affected Software

4 affected components

Google Android=4.4

Google Android=5.0

Google Android=5.1

Google Android=6.0

Event History

Apr 7, 2020

CVE Published

via MITRE·01:44 PM

Data Sourced

via MITRE·01:44 PM

Description

Frequently Asked Questions

What is the severity of CVE-2016-11030?

CVE-2016-11030 is a high-severity vulnerability due to the heap-based buffer overflow caused by concurrent access to the sensor driver.

How do I fix CVE-2016-11030?

To fix CVE-2016-11030, update your Samsung device to the latest available software version provided by Samsung.

What devices are affected by CVE-2016-11030?

CVE-2016-11030 affects Samsung mobile devices running Android versions 4.4, 5.0, 5.1, and 6.0 with HRM sensor support.

What happens if CVE-2016-11030 is exploited?

If exploited, CVE-2016-11030 can lead to arbitrary code execution due to the heap-based buffer overflow.

Is there a workaround for CVE-2016-11030?

There is no known workaround for CVE-2016-11030; updating the device is the recommended action.