CVE-2016-7989: High severity android vulnerability
On Samsung Galaxy S4 through S7 devices, a malformed OTA WAP PUSH SMS containing an OMACP message sent remotely triggers an unhandled ArrayIndexOutOfBoundsException in Samsung's implementation of the WifiServiceImpl class within wifi-service.jar. This causes the Android runtime to continually crash, rendering the device unusable until a factory reset is performed, a subset of SVE-2016-6542.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2016-7989?
CVE-2016-7989 is classified as a high severity vulnerability due to its potential to crash Android devices from remote exploitation.
How do I fix CVE-2016-7989?
To fix CVE-2016-7989, ensure your Samsung Galaxy device is updated to the latest security patches recommended by Samsung.
Which devices are affected by CVE-2016-7989?
CVE-2016-7989 affects Samsung Galaxy S4 to S7 devices running Android versions from 4.2.2 up to 6.0.1.
What is the impact of CVE-2016-7989?
The impact of CVE-2016-7989 includes causing the Android runtime to continuously crash, leading to system instability.
Can CVE-2016-7989 be exploited remotely?
Yes, CVE-2016-7989 can be exploited remotely through a malformed OTA WAP PUSH SMS containing an OMACP message.