Vulnerability Details CVE-2016-11030
An issue was discovered on Samsung mobile devices with KK(4.4), L(5.0/5.1), and M(6.0) (with Hrm sensor support) software. The sysfs of the MAX86902 sensor driver does not prevent concurrent access, leading to a race condition and resultant heap-based buffer overflow. The Samsung ID is SVE-2016-7341 (December 2016).
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 32.2%
CVSS Severity
CVSS v3 Score 8.1
CVSS v2 Score 6.8
Products affected by CVE-2016-11030
-
cpe:2.3:o:google:android:4.4
-
cpe:2.3:o:google:android:5.0
-
cpe:2.3:o:google:android:5.1
-
cpe:2.3:o:google:android:6.0