CVE-2016-4031

Severity: medium (CVSS 6.8 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.5% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2017-04-13 · updated 2026-06-17
Weakness: CWE-284

Description

Samsung SM-G920F build G920FXXU2COH2 (Galaxy S6), SM-N9005 build N9005XXUGBOK6 (Galaxy Note 3), GT-I9192 build I9192XXUBNB1 (Galaxy S4 mini), GT-I9195 build I9195XXUCOL1 (Galaxy S4 mini LTE), and GT-I9505 build I9505XXUHOJ2 (Galaxy S4) devices allow attackers to send AT commands by plugging the device into a Linux host, aka SVE-2016-5301.

Affected products

Samsung Galaxy Note 3 Firmware: n9005xxugbob6
Samsung Galaxy S4 Firmware: i9505xxuhoj2
Samsung Galaxy S4 Mini Firmware: i9192xxubnb1
Samsung Galaxy S4 Mini Lte Firmware: i9195xxucol1
Samsung Galaxy S6 Firmware: g920fxxu2coh2

References

http://www.securityfocus.com/bid/97703
https://github.com/ud2/advisories/tree/master/android/samsung/nocve-2016-0004
http://www.securityfocus.com/bid/97703
https://github.com/ud2/advisories/tree/master/android/samsung/nocve-2016-0004

Get alerted when CVE-2016-4031 or the next vulnerability affects your stack