CVE-2016-9966

Severity: critical (CVSS 9.8 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.9% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2016-12-16 · updated 2026-06-17
Weakness: CWE-388

Description

Lack of appropriate exception handling in some receivers of the Telecom application on Samsung Note devices with L(5.0/5.1), M(6.0), and N(7.0) software allows attackers to crash the system easily resulting in a possible DoS attack, or possibly gain privileges. The Samsung ID is SVE-2016-7120.

Affected products

Samsung Mobile: 5.0, 5.1, 6.0, 7.0

References

http://security.samsungmobile.com/smrupdate.html#SMR-DEC-2016
http://www.securityfocus.com/bid/94955
http://security.samsungmobile.com/smrupdate.html#SMR-DEC-2016
http://www.securityfocus.com/bid/94955

Get alerted when CVE-2016-9966 or the next vulnerability affects your stack