CVSS: 8.1EPSS: 0%CPEs: 4EXPL: 0CVE-2016-11030
https://notcve.org/view.php?id=CVE-2016-11030
07 Apr 2020 — An issue was discovered on Samsung mobile devices with KK(4.4), L(5.0/5.1), and M(6.0) (with Hrm sensor support) software. The sysfs of the MAX86902 sensor driver does not prevent concurrent access, leading to a race condition and resultant heap-based buffer overflow. The Samsung ID is SVE-2016-7341 (December 2016). Se detectó un problema en dispositivos móviles Samsung con versiones de software KK(4.4), L(5.0/5.1) y M(6.0) (con soporte de sensor Hrm). El sysfs del controlador del sensor MAX86902 no impide ... • https://security.samsungmobile.com/securityUpdate.smsb • CWE-362: Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') CWE-787: Out-of-bounds Write •
CVSS: 7.8EPSS: 0%CPEs: 4EXPL: 0CVE-2016-11031
https://notcve.org/view.php?id=CVE-2016-11031
07 Apr 2020 — An issue was discovered on Samsung mobile devices with KK(4.4), L(5.0/5.1), and M(6.0) software. AntService allows a system_server crash and reboot. The Samsung ID is SVE-2016-7044 (November 2016). Se detectó un problema en dispositivos móviles Samsung con versiones de software KK(4.4), L(5.0/5.1) y M(6.0). AntService permite un bloqueo y reinicio de system_server. • https://security.samsungmobile.com/securityUpdate.smsb • CWE-20: Improper Input Validation •
CVSS: 7.1EPSS: 0%CPEs: 3EXPL: 0CVE-2016-11034
https://notcve.org/view.php?id=CVE-2016-11034
07 Apr 2020 — An issue was discovered on Samsung mobile devices with L(5.0/5.1) and M(6.0) software. The decode function in Qjpeg in Qt 5.7 allows attackers to trigger a system crash via a malformed image. The Samsung ID is SVE-2016-6560 (October 2016). Se detectó un problema en dispositivos móviles Samsung con versiones de software L(5.0/5.1) y M(6.0). La función decode en Qjpeg en Qt versión 5.7, permite a atacantes activar un bloqueo del sistema por medio de una imagen malformada. • https://security.samsungmobile.com/securityUpdate.smsb • CWE-755: Improper Handling of Exceptional Conditions •
CVSS: 7.8EPSS: 0%CPEs: 4EXPL: 0CVE-2016-11039
https://notcve.org/view.php?id=CVE-2016-11039
07 Apr 2020 — An issue was discovered on Samsung mobile devices with KK(4.4), L(5.0/5.1), and M(6.0) (AP + CP MDM9x35, or Qualcomm Onechip) software. There is a NULL pointer dereference issue in the IPC socket code. The Samsung ID is SVE-2016-5980 (July 2016). Se detectó un problema en dispositivos móviles Samsung con versiones de software KK(4.4), L(5.0/5.1) y M(6.0) (AP + CP MDM9x35 o Qualcomm Onechip). Se presenta un problema de desreferencia del puntero NULL en el código de socket IPC. • https://security.samsungmobile.com/securityUpdate.smsb • CWE-476: NULL Pointer Dereference •
CVSS: 4.6EPSS: 0%CPEs: 2EXPL: 0CVE-2016-11040
https://notcve.org/view.php?id=CVE-2016-11040
07 Apr 2020 — An issue was discovered on Samsung mobile devices with L(5.0/5.1) (with USB OTG MyFile2014_L_ESS support) software. There is a Factory Reset Protection (FRP) bypass. The Samsung ID is SVE-2015-5068 (June 2016). Se detectó un problema en dispositivos móviles Samsung con versión de software L(5.0/5.1) (con soporte OTG MyFile2014_L_ESS del USB). Se presenta una omisión de Factory Reset Protection (FRP). • https://security.samsungmobile.com/securityUpdate.smsb • CWE-20: Improper Input Validation •
CVSS: 7.5EPSS: 0%CPEs: 3EXPL: 0CVE-2016-11042
https://notcve.org/view.php?id=CVE-2016-11042
07 Apr 2020 — An issue was discovered on Samsung mobile devices with L(5.0/5.1) and M(6.0) software. There is a SIM Lock bypass. The Samsung ID is SVE-2016-5381 (June 2016). Se detectó un problema en dispositivos móviles Samsung con versiones de software L(5.0/5.1) y M(6.0). Se presenta una omisión del SIM Lock. • https://security.samsungmobile.com/securityUpdate.smsb • CWE-287: Improper Authentication •
CVSS: 7.8EPSS: 0%CPEs: 3EXPL: 0CVE-2016-11044
https://notcve.org/view.php?id=CVE-2016-11044
07 Apr 2020 — An issue was discovered on Samsung mobile devices with L(5.0/5.1) and M(6.0) (with Fingerprint support) software. The check of an application's signature can be bypassed during installation. The Samsung ID is SVE-2016-5923 (June 2016). Se detectó un problema en dispositivos móviles Samsung con versiones de software L(5.0/5.1) y M(6.0) (con soporte Fingerprint). La comprobación de una firma de aplicación puede ser omitida durante la instalación. • https://security.samsungmobile.com/securityUpdate.smsb • CWE-347: Improper Verification of Cryptographic Signature •
CVSS: 7.8EPSS: 0%CPEs: 2EXPL: 0CVE-2016-11045
https://notcve.org/view.php?id=CVE-2016-11045
07 Apr 2020 — An issue was discovered on Samsung mobile devices with L(5.0/5.1) software. The Gallery library allow memory corruption via a malformed image. The Samsung ID is SVE-2016-5317 (May 2016). Se detectó un problema en dispositivos móviles Samsung con versión de software L(5.0/5.1). La biblioteca Gallery permite una corrupción de la memoria por medio de una imagen malformada. • https://security.samsungmobile.com/securityUpdate.smsb • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVSS: 7.5EPSS: 0%CPEs: 4EXPL: 0CVE-2016-11046
https://notcve.org/view.php?id=CVE-2016-11046
07 Apr 2020 — An issue was discovered on Samsung mobile devices with JBP(4.3), KK(4.4), and L(5.0/5.1) software. Because of a misused whitelist, attackers can reach the radio layer (aka RIL or RILD) to place calls or send SMS messages. The Samsung ID is SVE-2016-5733 (May 2016). Se detectó un problema en dispositivos móviles Samsung con versiones de software JBP(4.3), KK(4.4) y L(5.0/5.1). Debido a una lista blanca usada inapropiadamente, unos atacantes pueden alcanzar la capa radio (también se conoce como RIL o RILD) pa... • https://security.samsungmobile.com/securityUpdate.smsb • CWE-20: Improper Input Validation •
CVSS: 4.6EPSS: 0%CPEs: 2EXPL: 0CVE-2016-11048
https://notcve.org/view.php?id=CVE-2016-11048
07 Apr 2020 — An issue was discovered on Samsung mobile devices with L(5.0/5.1) (Spreadtrum or Marvell chipsets) software. There is a Factory Reset Protection (FRP) bypass. The Samsung ID is SVE-2016-5421 (March 2016). Se detectó un problema en dispositivos móviles Samsung con versión de software L(5.0/5.1) (chipsets Spreadtrum o Marvell). Se presenta una omisión de Factory Reset Protection (FRP). • https://security.samsungmobile.com/securityUpdate.smsb • CWE-20: Improper Input Validation •