CVE-2016-9277
HighSummary
Integer overflow in SystemUI in KK(4.4) and L(5.0/5.1) on Samsung Note devices allows attackers to cause a denial of service (UI restart) via vectors involving APIs and an activity that computes an out-of-bounds array index.
Risk Assessment
This vulnerability may lead to disruption of the user interface, affecting device availability and potentially being exploited for attacks on users.
Recommendation
It is recommended to update devices to the latest software version to mitigate this vulnerability and to monitor systems for unauthorized activities.
Other vulnerabilities in SystemUI
See all- CVE-2017-5350High
Samsung Note devices with L(5.0/5.1), M(6.0), and N(7.0) software allow attackers to crash systemUI by leveraging incomplete exception handling.
- CVE-2016-7160High
A vulnerability on Samsung Mobile M (6.0) devices exists due to improper restriction of external access to SystemUI activities, leading to a SystemUI crash and device restart.
- CVE-2015-6621High
SystemUI in Android 5.x before version 5.1.1 LMY48Z and 6.0 before December 1, 2015, allows attackers to gain privileges via a crafted application, enabling access to Signature or SignatureOrSystem levels.
- CVE-2020-0415Medium
In various locations in SystemUI, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local information disclosure of contact data with User execution privileges needed.
Original NVD description (English source)
Integer overflow in SystemUI in KK(4.4) and L(5.0/5.1) on Samsung Note devices allows attackers to cause a denial of service (UI restart) via vectors involving APIs and an activity that computes an out-of-bounds array index, aka SVE-2016-6906.