CVE-2016-4038: Input Validation

Published Feb 1, 2017

Updated

Array index error in the msmsensorconfig function in kernel/SM-G9008VCHNKKOpensource/Kernel/drivers/media/platform/msm/camerav2/sensor/msmsensor.c in Samsung devices with Android KK(4.4) or L and an APQ8084, MSM8974, or MSM8974pro chipset allows local users to have unspecified impact via the gpioconfig.gpioname value.

Affected Software

12 affected components

Samsung Samsung Mobile=4.4

Samsung Samsung Mobile=5.0

Samsung Samsung Mobile=5.1

Samsung APQ8084

Samsung MSM8974

Samsung MSM8974pro

All of the following

Any of the following

Samsung Samsung Mobile=4.4

Samsung Samsung Mobile=5.0

Samsung Samsung Mobile=5.1

Any of the following

Samsung APQ8084

Samsung MSM8974

Samsung MSM8974pro

Event History

Feb 1, 2017

CVE Published

via MITRE·03:00 PM

Data Sourced

via MITRE·03:00 PM

Description

Data Sourced

via NVD·03:59 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2016-4038?

CVE-2016-4038 is classified as a high-severity vulnerability due to its potential impact on users.

How do I fix CVE-2016-4038?

To fix CVE-2016-4038, users should update their devices to the latest security patches provided by Samsung.

What devices are affected by CVE-2016-4038?

CVE-2016-4038 affects certain Samsung mobile devices running Android versions 4.4, 5.0, and 5.1.

What type of vulnerability is CVE-2016-4038?

CVE-2016-4038 is an array index error vulnerability that can lead to unspecified impacts for local users.

Who can be impacted by CVE-2016-4038?

Local users of affected Samsung devices can be impacted by CVE-2016-4038 through exploitation of the vulnerability.