CVE-2016-11040: Input Validation

Published Apr 7, 2020

Updated

An issue was discovered on Samsung mobile devices with L(5.0/5.1) (with USB OTG MyFile2014LESS support) software. There is a Factory Reset Protection (FRP) bypass. The Samsung ID is SVE-2015-5068 (June 2016).

Affected Software

2 affected components

Google Android=5.0

Google Android=5.1

Event History

Apr 7, 2020

CVE Published

via MITRE·01:07 PM

Data Sourced

via MITRE·01:07 PM

Description

Frequently Asked Questions

What is the severity of CVE-2016-11040?

CVE-2016-11040 is considered a high severity vulnerability due to its potential to bypass Factory Reset Protection on affected devices.

How do I fix CVE-2016-11040?

To fix CVE-2016-11040, you should apply the latest security updates provided by Samsung for your mobile device.

Which devices are affected by CVE-2016-11040?

CVE-2016-11040 affects Samsung mobile devices running Android versions 5.0 and 5.1.

What is Factory Reset Protection in relation to CVE-2016-11040?

Factory Reset Protection is a security feature designed to prevent unauthorized access to devices after a factory reset, which CVE-2016-11040 bypasses.

When was CVE-2016-11040 reported?

CVE-2016-11040 was reported in June 2016 as part of the Samsung security update.