What is CVE-2016-11038?

CVE-2016-11038 is a vulnerability found on Samsung mobile devices with software through 2016-04-05 that allows arbitrary code execution or privilege escalation.

How severe is CVE-2016-11038?

CVE-2016-11038 has a severity rating of 9.8 out of 10.

Which Samsung devices are affected by CVE-2016-11038?

Samsung Galaxy Note 3, Samsung Galaxy Note 4, Samsung Galaxy Note Edge, Samsung Galaxy S5, Samsung Galaxy S6, and Samsung Galaxy S6 Edge are not affected by CVE-2016-11038.

How can CVE-2016-11038 be fixed?

To fix CVE-2016-11038, update your Samsung mobile device's software through the latest security update provided by Samsung.

Where can I find more information about CVE-2016-11038?

More information about CVE-2016-11038 can be found on the Samsung Mobile Security website at https://security.samsungmobile.com/securityUpdate.smsb.

Vulnerability/
CVE-2016-11038

critical

9.8

CWE

119

7/4/2020

6/8/2024

CVE-2016-11038: Buffer Overflow

First published: Tue Apr 07 2020(Updated: )

An issue was discovered on Samsung mobile devices with software through 2016-04-05 (incorporating the Samsung Professional Audio SDK). The Jack audio service doesn't implement access control for shared memory, leading to arbitrary code execution or privilege escalation. The Samsung ID is SVE-2016-5953 (July 2016).

Credit: cve@mitre.org

Affected Software	Affected Version	How to fix
Google Android
Samsung Galaxy Note 3
Samsung Galaxy Note 4
Samsung Galaxy Note Edge
Samsung Galaxy S5
Samsung Galaxy S6
Samsung Galaxy S6 Edge

Never miss a vulnerability like this again

Reference Links

https://security.samsungmobile.com/securityUpdate.smsb

Frequently Asked Questions

What is CVE-2016-11038?
CVE-2016-11038 is a vulnerability found on Samsung mobile devices with software through 2016-04-05 that allows arbitrary code execution or privilege escalation.
How severe is CVE-2016-11038?
CVE-2016-11038 has a severity rating of 9.8 out of 10.
Which Samsung devices are affected by CVE-2016-11038?
Samsung Galaxy Note 3, Samsung Galaxy Note 4, Samsung Galaxy Note Edge, Samsung Galaxy S5, Samsung Galaxy S6, and Samsung Galaxy S6 Edge are not affected by CVE-2016-11038.
How can CVE-2016-11038 be fixed?
To fix CVE-2016-11038, update your Samsung mobile device's software through the latest security update provided by Samsung.
Where can I find more information about CVE-2016-11038?
More information about CVE-2016-11038 can be found on the Samsung Mobile Security website at https://security.samsungmobile.com/securityUpdate.smsb.

agent/type
collector/nvd-index
agent/software-canonical-lookup-request
collector/mitre-cve
source/MITRE
agent/weakness
agent/author
agent/last-modified-date
agent/severity
agent/references
agent/first-publish-date
agent/softwarecombine
agent/tags
agent/event
agent/description
vendor/google
canonical/google android
vendor/samsung
canonical/samsung galaxy note 3
canonical/samsung galaxy note 4
canonical/samsung galaxy note edge
canonical/samsung galaxy s5
canonical/samsung galaxy s6
canonical/samsung galaxy s6 edge

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co

By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.