What’s Vulnerable › Vulnerabilities

CVE-2019-16257

• Severity: critical (CVSS 9.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 2.1% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2019-09-12 · updated 2026-06-17

Description

Some Motorola devices include the SIMalliance Toolbox Browser (aka S@T Browser) on the UICC, which might allow remote attackers to retrieve location and IMEI information, or retrieve other data or execute certain commands, via SIM Toolkit (STK) instructions in an SMS message, aka Simjacker.

Affected products

• Motorola Firmware: all versions

References

• https://www.adaptivemobile.com/blog/simjacker-next-generation-spying-over-mobile
• https://www.adaptivemobile.com/blog/simjacker-next-generation-spying-over-mobile

Get alerted when CVE-2019-16257 or the next vulnerability affects your stack