CVE-2016-11046: Input Validation

Published Apr 7, 2020

Updated

An issue was discovered on Samsung mobile devices with JBP(4.3), KK(4.4), and L(5.0/5.1) software. Because of a misused whitelist, attackers can reach the radio layer (aka RIL or RILD) to place calls or send SMS messages. The Samsung ID is SVE-2016-5733 (May 2016).

Affected Software

4 affected components

Google Android=4.3

Google Android=4.4

Google Android=5.0

Google Android=5.1

Event History

Apr 7, 2020

CVE Published

via MITRE·12:48 PM

Data Sourced

via MITRE·12:48 PM

Description

Frequently Asked Questions

What is the severity of CVE-2016-11046?

The severity of CVE-2016-11046 is considered to be high due to potential unauthorized access to the phone's radio layer.

How do I fix CVE-2016-11046?

To fix CVE-2016-11046, users should apply the latest software updates provided by Samsung for their affected devices.

Which devices are affected by CVE-2016-11046?

CVE-2016-11046 affects Samsung mobile devices running Android versions 4.3, 4.4, 5.0, and 5.1.

What type of vulnerability is CVE-2016-11046?

CVE-2016-11046 is a security vulnerability that allows attackers to misuse a whitelist to access the radio layer for placing calls or sending SMS.

When was CVE-2016-11046 disclosed?

CVE-2016-11046 was disclosed in May 2016, highlighting a significant security issue in certain Samsung mobile devices.