CVE Catalog

CVE-2016-9967

Critical
Published: Translated: NVD NIST

Summary

Lack of appropriate exception handling in some receivers of the Telecom application on Samsung Note devices with L(5.0/5.1), M(6.0), and N(7.0) software allows attackers to crash the system easily resulting in a possible DoS attack, or possibly gain privileges.

Risk Assessment

The organization may be exposed to DoS attacks that can disrupt system operations, as well as potential unauthorized privilege escalation by attackers.

Recommendation

It is recommended to update the software of Samsung Note devices to the latest version to patch this vulnerability and implement system monitoring to detect unauthorized activities.

Original NVD description (English source)

Lack of appropriate exception handling in some receivers of the Telecom application on Samsung Note devices with L(5.0/5.1), M(6.0), and N(7.0) software allows attackers to crash the system easily resulting in a possible DoS attack, or possibly gain privileges. The Samsung ID is SVE-2016-7121.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS