CVE-2016-9279

High

Published: 18/01/2017(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

A use-after-free vulnerability in the fimg2d driver for Android on Exynos 5433, 54xx, or 7420 chipsets allows attackers to obtain sensitive information via unspecified vectors.

Risk Assessment

Attackers may exploit this vulnerability to steal data, posing a significant security risk to users of devices with these chipsets.

Recommendation

It is recommended to update drivers and monitor devices for potential exploitation attempts of this vulnerability.

Other vulnerabilities in Samsung Exynos fimg2d driver

CVE-2016-6604Critical
A NULL pointer dereference in the fimg2d driver for Android L (5.0/5.1) and M (6.0) on Samsung Exynos processors allows for unspecified impact via unknown vectors.

Original NVD description (English source)

Use-after-free vulnerability in the Samsung Exynos fimg2d driver for Android with Exynos 5433, 54xx, or 7420 chipsets allows attackers to obtain sensitive information via unspecified vectors. The Samsung ID is SVE-2016-6853.