CVE-2016-7990
CriticalSummary
On Samsung Galaxy S4 through S7 devices, an integer overflow condition exists within libomacp.so when parsing OMACP messages, leading to heap corruption. This can result in Denial of Service and potentially remote code execution.
Risk Assessment
The organization may be exposed to attacks that could lead to system crashes or remote control of user devices.
Recommendation
It is recommended to update devices to the latest software version to minimize the risk associated with this vulnerability.
Original NVD description (English source)
On Samsung Galaxy S4 through S7 devices, an integer overflow condition exists within libomacp.so when parsing OMACP messages (within WAP Push SMS messages) leading to a heap corruption that can result in Denial of Service and potentially remote code execution, a subset of SVE-2016-6542.