CVE-2016-7991
First published: Mon Oct 31 2016(Updated: )
On Samsung Galaxy S4 through S7 devices, the "omacp" app ignores security information embedded in the OMACP messages resulting in remote unsolicited WAP Push SMS messages being accepted, parsed, and handled by the device, leading to unauthorized configuration changes, a subset of SVE-2016-6542.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Android | =4.2.2 | |
| Android | =4.3 | |
| Android | =4.3.1 | |
| Android | =4.4 | |
| Android | =4.4.1 | |
| Android | =4.4.2 | |
| Android | =4.4.3 | |
| Android | =4.4.4 | |
| Android | =5.0 | |
| Android | =5.0.1 | |
| Android | =5.0.2 | |
| Android | =5.1 | |
| Android | =5.1.0 | |
| Android | =5.1.1 | |
| Android | =6.0 | |
| Android | =6.0.1 | |
| Samsung Galaxy S4 | ||
| Samsung Galaxy S4 mini LTE | ||
| Samsung Galaxy S5 Firmware | ||
| Samsung Galaxy S6 Firmware | ||
| Samsung Galaxy S7 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2016-7991?
CVE-2016-7991 is classified as a high-severity vulnerability due to its potential for unauthorized configuration changes on affected devices.
How do I fix CVE-2016-7991?
Fixing CVE-2016-7991 involves updating the affected Samsung Galaxy devices to the latest security patch provided by Samsung.
What devices are affected by CVE-2016-7991?
CVE-2016-7991 affects Samsung Galaxy S4, S5, S6, S7, and various versions of Android from 4.2.2 to 6.0.1.
What is the impact of CVE-2016-7991?
The impact of CVE-2016-7991 includes the acceptance and handling of malicious WAP Push SMS messages leading to unauthorized changes.
Was CVE-2016-7991 disclosed publicly?
Yes, CVE-2016-7991 was publicly disclosed in August 2016 as part of Samsung's security updates.
- agent/references
- agent/type
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/author
- agent/severity
- agent/weakness
- agent/first-publish-date
- agent/event
- agent/description
- agent/source
- agent/softwarecombine
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/google
- canonical/android
- version/android/4.2.2
- version/android/4.3
- version/android/4.3.1
- version/android/4.4
- version/android/4.4.1
- version/android/4.4.2
- version/android/4.4.3
- version/android/4.4.4
- version/android/5.0
- version/android/5.0.1
- version/android/5.0.2
- version/android/5.1
- version/android/5.1.0
- version/android/5.1.1
- version/android/6.0
- version/android/6.0.1
- vendor/samsung
- canonical/samsung galaxy s4
- canonical/samsung galaxy s4 mini lte
- canonical/samsung galaxy s5 firmware
- canonical/samsung galaxy s6 firmware
- canonical/samsung galaxy s7