Vulnerability Details CVE-2016-4038
Array index error in the msm_sensor_config function in kernel/SM-G9008V_CHN_KK_Opensource/Kernel/drivers/media/platform/msm/camera_v2/sensor/msm_sensor.c in Samsung devices with Android KK(4.4) or L and an APQ8084, MSM8974, or MSM8974pro chipset allows local users to have unspecified impact via the gpio_config.gpio_name value.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.0
EPSS Ranking 12.4%
CVSS Severity
CVSS v3 Score 7.8
CVSS v2 Score 7.2
References
- http://security.samsungmobile.com/smrupdate.html#SMR-JAN-2016
- http://www.openwall.com/lists/oss-security/2016/04/17/2
- http://www.openwall.com/lists/oss-security/2016/04/18/8
- http://security.samsungmobile.com/smrupdate.html#SMR-JAN-2016
- http://www.openwall.com/lists/oss-security/2016/04/17/2
- http://www.openwall.com/lists/oss-security/2016/04/18/8
Products affected by CVE-2016-4038
-
cpe:2.3:h:samsung:apq8084:-
-
cpe:2.3:h:samsung:msm8974:-
-
cpe:2.3:h:samsung:msm8974pro:-
-
cpe:2.3:o:samsung:samsung_mobile:4.4
-
cpe:2.3:o:samsung:samsung_mobile:5.0
-
cpe:2.3:o:samsung:samsung_mobile:5.1