What’s Vulnerable › Vulnerabilities

CVE-2016-9278

• Severity: medium (CVSS 5.5 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.4% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2017-01-18 · updated 2026-06-17
• Weakness: CWE-20

Description

The Samsung Exynos fimg2d driver for Android with Exynos 5433, 54xx, or 7420 chipsets allows local users to cause a denial of service (kernel panic) via a crafted ioctl command. The Samsung ID is SVE-2016-6736.

Affected products

• Samsung Exynos Fimg2D Driver: all versions

References

• http://security.samsungmobile.com/smrupdate.html#SMR-NOV-2016
• http://www.openwall.com/lists/oss-security/2016/11/09/3
• http://www.openwall.com/lists/oss-security/2016/11/11/11
• http://www.securityfocus.com/bid/94283
• http://security.samsungmobile.com/smrupdate.html#SMR-NOV-2016
• http://www.openwall.com/lists/oss-security/2016/11/09/3
• http://www.openwall.com/lists/oss-security/2016/11/11/11
• http://www.securityfocus.com/bid/94283

Get alerted when CVE-2016-9278 or the next vulnerability affects your stack