CVE-2019-16400: Medium severity samsung galaxy s8+ firmware vulnerability

Published Nov 6, 2019
·
Updated

Samsung Galaxy S8 plus (Android version: 8.0.0, Build Number: R16NW.G955USQU5CRG3, Baseband Vendor: Qualcomm Snapdragon 835, Baseband: G955USQU5CRG3), Samsung Galaxy S3 (Android version: 4.3, Build Number: JSS15J.I9300XXUGND5, Baseband Vendor: Samsung Exynos 4412, Baseband: I9300XXUGNA8), and Samsung Galaxy Note 2 (Android version: 4.3, Build Number: JSS15J.I9300XUGND5, Baseband Vendor: Samsung Exynos 4412, Baseband: N7100DDUFND1) devices allow attackers to send AT commands over Bluetooth, resulting in several Denial of Service (DoS) attacks.

Affected Software

6 affected components
Samsung Galaxy S8 Plus Firmware
Samsung Galaxy S8 plus
Samsung Galaxy S3 Firmware
Samsung Galaxy S3
Samsung Galaxy Note 2 Firmware
Samsung Galaxy Note 2

Event History

Nov 6, 2019
CVE Published
via MITRE·10:12 PM
Data Sourced
via MITRE·10:12 PM
Description

Frequently Asked Questions

1

What is the vulnerability ID?

The vulnerability ID is CVE-2019-16400.

2

Which devices are affected by CVE-2019-16400?

Samsung Galaxy S8 Plus (Android version: 8.0.0, Build Number: R16NW.G955USQU5CRG3, Baseband Vendor: Qualcomm Snapdragon 835, Baseband: G955USQU5CRG3), Samsung Galaxy S3 (Android version: 4.3, Build Number: JSS15J.I9300XXUGND5, Baseband Vendor: Samsung Exynos 4412, Baseband: I9300XXUGNA8), and Samsung Galaxy Note 2 are affected.

3

What is the severity level of CVE-2019-16400?

The severity level of CVE-2019-16400 is medium with a severity value of 6.5.

4

What is the reference for more information about CVE-2019-16400?

You can find more information about CVE-2019-16400 at this link: [https://www.openconf.org/acsac2019/modules/request.php?module=oc_program&action=summary.php&id=210](https://www.openconf.org/acsac2019/modules/request.php?module=oc_program&action=summary.php&id=210)

5

How can I fix CVE-2019-16400?

Please refer to the official security advisory from Samsung for instructions on how to fix this vulnerability.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203