CVE-2016-9277: Integer Overflow

Published Nov 11, 2016

Updated

Integer overflow in SystemUI in KK(4.4) and L(5.0/5.1) on Samsung Note devices allows attackers to cause a denial of service (UI restart) via vectors involving APIs and an activity that computes an out-of-bounds array index, aka SVE-2016-6906.

Affected Software

3 affected components

Samsung Samsung Mobile=4.4

Samsung Samsung Mobile=5.0

Samsung Samsung Mobile=5.1

Event History

Nov 11, 2016

CVE Published

via MITRE·07:00 PM

Data Sourced

via MITRE·07:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2016-9277?

CVE-2016-9277 has been classified as a denial of service vulnerability affecting specific Samsung mobile devices.

How do I fix CVE-2016-9277?

To fix CVE-2016-9277, users should update their Samsung mobile devices to the latest firmware version provided by Samsung.

What devices are impacted by CVE-2016-9277?

CVE-2016-9277 affects Samsung Note devices running Android versions 4.4, 5.0, and 5.1.

What type of attack does CVE-2016-9277 facilitate?

CVE-2016-9277 allows attackers to trigger a denial of service that results in a UI restart on affected devices.

What causes the vulnerability in CVE-2016-9277?

CVE-2016-9277 is caused by an integer overflow in the SystemUI that leads to out-of-bounds array accesses.