CVE-2016-9965: Critical severity samsung mobile vulnerability

Published Dec 16, 2016

Updated

Lack of appropriate exception handling in some receivers of the Telecom application on Samsung Note devices with L(5.0/5.1), M(6.0), and N(7.0) software allows attackers to crash the system easily resulting in a possible DoS attack, or possibly gain privileges. The Samsung ID is SVE-2016-7119.

Affected Software

4 affected components

Samsung Samsung Mobile=5.0

Samsung Samsung Mobile=5.1

Samsung Samsung Mobile=6.0

Samsung Samsung Mobile=7.0

Event History

Dec 16, 2016

CVE Published

via MITRE·09:02 AM

Data Sourced

via MITRE·09:02 AM

Description

Frequently Asked Questions

What is the severity of CVE-2016-9965?

CVE-2016-9965 has a moderate severity rating due to its potential for causing denial of service attacks.

How do I fix CVE-2016-9965?

To fix CVE-2016-9965, update your Samsung Note device to the latest software version available.

Which devices are affected by CVE-2016-9965?

CVE-2016-9965 affects Samsung Note devices running versions 5.0, 5.1, 6.0, and 7.0 of the Samsung Mobile software.

What can happen if CVE-2016-9965 is exploited?

Exploitation of CVE-2016-9965 can lead to system crashes or privilege escalation on affected devices.

Is there a workaround for CVE-2016-9965?

Currently, the best workaround for CVE-2016-9965 is to ensure timely software updates are applied.