CVE-2016-11048: Input Validation

Published Apr 7, 2020

Updated

An issue was discovered on Samsung mobile devices with L(5.0/5.1) (Spreadtrum or Marvell chipsets) software. There is a Factory Reset Protection (FRP) bypass. The Samsung ID is SVE-2016-5421 (March 2016).

Affected Software

2 affected components

Google Android=5.0

Google Android=5.1

Event History

Apr 7, 2020

CVE Published

via MITRE·12:45 PM

Data Sourced

via MITRE·12:45 PM

Description

Frequently Asked Questions

What is the severity of CVE-2016-11048?

CVE-2016-11048 has been classified as a high-severity vulnerability due to its potential to bypass Factory Reset Protection on affected devices.

How do I fix CVE-2016-11048?

To fix CVE-2016-11048, users should update their affected Samsung devices to the latest firmware version provided by Samsung.

Which devices are affected by CVE-2016-11048?

CVE-2016-11048 affects Samsung mobile devices running Android versions 5.0 and 5.1 that use Spreadtrum or Marvell chipsets.

What types of attacks can exploit CVE-2016-11048?

CVE-2016-11048 can be exploited to bypass Factory Reset Protection, allowing unauthorized access to the device.

Is there a workaround for CVE-2016-11048?

Currently, the recommended solution for CVE-2016-11048 is to apply the firmware update, as there are no known effective workarounds.