CVE-2016-11050

Severity: medium (CVSS 4.3 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2020-04-07 · updated 2026-06-17

Description

An issue was discovered on Samsung mobile devices with S3(KK), Note2(KK), S4(L), Note3(L), and S5(L) software. An attacker can rewrite the IMEI by flashing crafted firmware. The Samsung ID is SVE-2016-5562 (March 2016).

Affected products

Samsung Note2 Firmware: all versions
Samsung Note3 Firmware: all versions
Samsung S3 Firmware: all versions
Samsung S4 Firmware: all versions
Samsung S5 Firmware: all versions

References

https://security.samsungmobile.com/securityUpdate.smsb
https://security.samsungmobile.com/securityUpdate.smsb

Get alerted when CVE-2016-11050 or the next vulnerability affects your stack