What’s Vulnerable › Vulnerabilities

CVE-2016-9567

• Severity: medium (CVSS 5.5 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.9% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2016-11-23 · updated 2026-06-17
• Weakness: CWE-200

Description

The mDNIe system service on Samsung Mobile S7 devices with M(6.0) software does not properly restrict setmDNIeScreenCurtain API calls, enabling attackers to control a device's screen. This can be exploited via a crafted application to eavesdrop after phone shutdown or record a conversation. The Samsung ID is SVE-2016-6343.

Affected products

• Samsung Mobile: 6.0

References

• http://security.samsungmobile.com/smrupdate.html#SMR-NOV-2016
• http://www.securityfocus.com/bid/94494
• http://security.samsungmobile.com/smrupdate.html#SMR-NOV-2016
• http://www.securityfocus.com/bid/94494

Get alerted when CVE-2016-9567 or the next vulnerability affects your stack