CVE-2016-9567: Infoleak
The mDNIe system service on Samsung Mobile S7 devices with M(6.0) software does not properly restrict setmDNIeScreenCurtain API calls, enabling attackers to control a device's screen. This can be exploited via a crafted application to eavesdrop after phone shutdown or record a conversation. The Samsung ID is SVE-2016-6343.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2016-9567?
CVE-2016-9567 is considered a high severity vulnerability due to its potential to allow unauthorized control over a device's screen.
How does CVE-2016-9567 affect Samsung Mobile S7 devices?
CVE-2016-9567 affects Samsung Mobile S7 devices running Android 6.0, allowing attackers to misuse the mDNIe system service.
How can I fix CVE-2016-9567?
To fix CVE-2016-9567, users should update their devices to the latest firmware version provided by Samsung.
What type of attacks can be performed using CVE-2016-9567?
Exploitation of CVE-2016-9567 can enable attackers to eavesdrop on communications or record conversations through a crafted application.
Is CVE-2016-9567 present in any other devices besides the Samsung Mobile S7?
CVE-2016-9567 has been specifically identified in Samsung Mobile S7 devices with the M(6.0) software version and is not documented for other devices.