CVE Catalog

CVE-2016-9965

Critical
Published: Translated: NVD NIST

Summary

Lack of appropriate exception handling in some receivers of the Telecom application on Samsung Note devices with L(5.0/5.1), M(6.0), and N(7.0) software allows attackers to easily crash the system, potentially leading to a DoS attack or gaining privileges.

Risk Assessment

The organization may be exposed to DoS attacks that can disrupt system operations, as well as the possibility of unauthorized privilege escalation by attackers.

Recommendation

It is recommended to update devices to the latest software version to patch this vulnerability and implement system monitoring to detect unauthorized activities.

Original NVD description (English source)

Lack of appropriate exception handling in some receivers of the Telecom application on Samsung Note devices with L(5.0/5.1), M(6.0), and N(7.0) software allows attackers to crash the system easily resulting in a possible DoS attack, or possibly gain privileges. The Samsung ID is SVE-2016-7119.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS