CVE-2016-4038

Severity: high (CVSS 7.8 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2017-02-01 · updated 2026-06-17
Weakness: CWE-20

Description

Array index error in the msm_sensor_config function in kernel/SM-G9008V_CHN_KK_Opensource/Kernel/drivers/media/platform/msm/camera_v2/sensor/msm_sensor.c in Samsung devices with Android KK(4.4) or L and an APQ8084, MSM8974, or MSM8974pro chipset allows local users to have unspecified impact via the gpio_config.gpio_name value.

Affected products

Samsung Mobile: 4.4, 5.0, 5.1

References

http://security.samsungmobile.com/smrupdate.html#SMR-JAN-2016
http://www.openwall.com/lists/oss-security/2016/04/17/2
http://www.openwall.com/lists/oss-security/2016/04/18/8
http://security.samsungmobile.com/smrupdate.html#SMR-JAN-2016
http://www.openwall.com/lists/oss-security/2016/04/17/2
http://www.openwall.com/lists/oss-security/2016/04/18/8

Get alerted when CVE-2016-4038 or the next vulnerability affects your stack