CVE-2016-11031: Input Validation

Published Apr 7, 2020

Updated

An issue was discovered on Samsung mobile devices with KK(4.4), L(5.0/5.1), and M(6.0) software. AntService allows a systemserver crash and reboot. The Samsung ID is SVE-2016-7044 (November 2016).

Affected Software

4 affected components

Google Android=4.4

Google Android=5.0

Google Android=5.1

Google Android=6.0

Event History

Apr 7, 2020

CVE Published

via MITRE·01:42 PM

Data Sourced

via MITRE·01:42 PM

Description

Frequently Asked Questions

What is the severity of CVE-2016-11031?

CVE-2016-11031 has a high severity level due to its ability to cause a system_server crash and reboot, affecting device stability.

How do I fix CVE-2016-11031?

To fix CVE-2016-11031, users should apply the latest security updates provided by Samsung for affected Android versions 4.4, 5.0, 5.1, and 6.0.

Which devices are affected by CVE-2016-11031?

CVE-2016-11031 affects Samsung mobile devices running Android versions 4.4, 5.0, 5.1, and 6.0.

What causes the vulnerability CVE-2016-11031?

CVE-2016-11031 is caused by an issue in AntService, which can trigger a crash of the system_server.

Is CVE-2016-11031 exploited in the wild?

As of now, there are no confirmed reports of CVE-2016-11031 being actively exploited in the wild.