CVE-2016-9966
CRITICALSamsung Mobile Note - Denial of Service via Telecom Application Exception Handling
Title source: llmDescription
Lack of appropriate exception handling in some receivers of the Telecom application on Samsung Note devices with L(5.0/5.1), M(6.0), and N(7.0) software allows attackers to crash the system easily resulting in a possible DoS attack, or possibly gain privileges. The Samsung ID is SVE-2016-7120.
References (2)
Core 2
Core References
Third Party Advisory, VDB Entry vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/94955
Vendor Advisory x_refsource_confirm
http://security.samsungmobile.com/smrupdate.html#SMR-DEC-2016
Scores
CVSS v3
9.8
EPSS
0.0049
EPSS Percentile
65.9%
Attack Vector
NETWORK
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Details
CWE
CWE-388
Status
published
Products (4)
samsung/samsung_mobile
5.0
samsung/samsung_mobile
5.1
samsung/samsung_mobile
6.0
samsung/samsung_mobile
7.0
Published
Dec 16, 2016
Tracked Since
Feb 18, 2026