CVE-2016-7989

Published on: 10/31/2016 12:00:00 AM UTC

Last Modified on: 03/23/2021 11:27:06 PM UTC

CVE-2016-7989

Source: Mitre
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Certain versions of Android from Google contain the following vulnerability:

On Samsung Galaxy S4 through S7 devices, a malformed OTA WAP PUSH SMS containing an OMACP message sent remotely triggers an unhandled ArrayIndexOutOfBoundsException in Samsung's implementation of the WifiServiceImpl class within wifi-service.jar. This causes the Android runtime to continually crash, rendering the device unusable until a factory reset is performed, a subset of SVE-2016-6542.

  • CVE-2016-7989 has been assigned by [email protected] to track the vulnerability - currently rated as HIGH severity.

CVSS3 Score: 7.5 - HIGH

Attack
Vector ⓘ		 Attack
Complexity		 Privileges
Required		 User
Interaction
NETWORK LOW NONE NONE
Scope Confidentiality
Impact		 Integrity
Impact		 Availability
Impact
UNCHANGED NONE NONE HIGH

CVSS2 Score: 7.8 - HIGH

Access
Vector ⓘ		 Access
Complexity		 Authentication
NETWORK LOW NONE
Confidentiality
Impact		 Integrity
Impact		 Availability
Impact
NONE NONE COMPLETE

CVE References

Description Tags ⓘ Link
Multiple Samsung Galaxy Devices CVE-2016-7989 Denial of Service Vulnerability Third Party Advisory
VDB Entry
cve.report (archive)
text/html
 URL Logo BID 94082
Samsung Mobile Security Blog Vendor Advisory
security.samsungmobile.com
text/html
 URL Logo CONFIRM security.samsungmobile.com/smrupdate.html#SMR-AUG-2016
By selecting these links, you may be leaving CVEreport webspace. We have provided these links to other websites because they may have information that would be of interest to you. No inferences should be drawn on account of other sites being referenced, or not, from this page. There may be other websites that are more appropriate for your purpose. CVEreport does not necessarily endorse the views expressed, or concur with the facts presented on these sites. Further, CVEreport does not endorse any commercial products that may be mentioned on these sites. Please address comments about any linked pages to [email protected].

Known Affected Configurations (CPE V2.3)

Type Vendor Product Version Update Edition Language
Operating
System		GoogleAndroid4.2.2AllAllAll
Operating
System		GoogleAndroid4.3AllAllAll
Operating
System		GoogleAndroid4.3.1AllAllAll
Operating
System		GoogleAndroid4.4AllAllAll
Operating
System		GoogleAndroid4.4.1AllAllAll
Operating
System		GoogleAndroid4.4.2AllAllAll
Operating
System		GoogleAndroid4.4.3AllAllAll
Operating
System		GoogleAndroid4.4.4AllAllAll
Operating
System		GoogleAndroid5.0AllAllAll
Operating
System		GoogleAndroid5.0.1AllAllAll
Operating
System		GoogleAndroid5.0.2AllAllAll
Operating
System		GoogleAndroid5.1AllAllAll
Operating
System		GoogleAndroid5.1.0AllAllAll
Operating
System		GoogleAndroid5.1.1AllAllAll
Operating
System		GoogleAndroid6.0AllAllAll
Operating
System		GoogleAndroid6.0.1AllAllAll
Operating
System		GoogleAndroid4.2.2AllAllAll
Operating
System		GoogleAndroid4.3AllAllAll
Operating
System		GoogleAndroid4.3.1AllAllAll
Operating
System		GoogleAndroid4.4AllAllAll
Operating
System		GoogleAndroid4.4.1AllAllAll
Operating
System		GoogleAndroid4.4.2AllAllAll
Operating
System		GoogleAndroid4.4.3AllAllAll
Operating
System		GoogleAndroid4.4.4AllAllAll
Operating
System		GoogleAndroid5.0AllAllAll
Operating
System		GoogleAndroid5.0.1AllAllAll
Operating
System		GoogleAndroid5.0.2AllAllAll
Operating
System		GoogleAndroid5.1AllAllAll
Operating
System		GoogleAndroid5.1.0AllAllAll
Operating
System		GoogleAndroid5.1.1AllAllAll
Operating
System		GoogleAndroid6.0AllAllAll
Operating
System		GoogleAndroid6.0.1AllAllAll
HardwareSamsungGalaxy S4-AllAllAll
HardwareSamsungGalaxy S4-AllAllAll
HardwareSamsungGalaxy S4 Mini-AllAllAll
HardwareSamsungGalaxy S4 Mini-AllAllAll
HardwareSamsungGalaxy S5-AllAllAll
HardwareSamsungGalaxy S5-AllAllAll
HardwareSamsungGalaxy S6-AllAllAll
HardwareSamsungGalaxy S6-AllAllAll
HardwareSamsungGalaxy S7-AllAllAll
HardwareSamsungGalaxy S7-AllAllAll
  • cpe:2.3:o:google:android:4.2.2:*:*:*:*:*:*:*:
  • cpe:2.3:o:google:android:4.3:*:*:*:*:*:*:*:
  • cpe:2.3:o:google:android:4.3.1:*:*:*:*:*:*:*:
  • cpe:2.3:o:google:android:4.4:*:*:*:*:*:*:*:
  • cpe:2.3:o:google:android:4.4.1:*:*:*:*:*:*:*:
  • cpe:2.3:o:google:android:4.4.2:*:*:*:*:*:*:*:
  • cpe:2.3:o:google:android:4.4.3:*:*:*:*:*:*:*:
  • cpe:2.3:o:google:android:4.4.4:*:*:*:*:*:*:*:
  • cpe:2.3:o:google:android:5.0:*:*:*:*:*:*:*:
  • cpe:2.3:o:google:android:5.0.1:*:*:*:*:*:*:*:
  • cpe:2.3:o:google:android:5.0.2:*:*:*:*:*:*:*:
  • cpe:2.3:o:google:android:5.1:*:*:*:*:*:*:*:
  • cpe:2.3:o:google:android:5.1.0:*:*:*:*:*:*:*:
  • cpe:2.3:o:google:android:5.1.1:*:*:*:*:*:*:*:
  • cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*:
  • cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*:
  • cpe:2.3:o:google:android:4.2.2:*:*:*:*:*:*:*:
  • cpe:2.3:o:google:android:4.3:*:*:*:*:*:*:*:
  • cpe:2.3:o:google:android:4.3.1:*:*:*:*:*:*:*:
  • cpe:2.3:o:google:android:4.4:*:*:*:*:*:*:*:
  • cpe:2.3:o:google:android:4.4.1:*:*:*:*:*:*:*:
  • cpe:2.3:o:google:android:4.4.2:*:*:*:*:*:*:*:
  • cpe:2.3:o:google:android:4.4.3:*:*:*:*:*:*:*:
  • cpe:2.3:o:google:android:4.4.4:*:*:*:*:*:*:*:
  • cpe:2.3:o:google:android:5.0:*:*:*:*:*:*:*:
  • cpe:2.3:o:google:android:5.0.1:*:*:*:*:*:*:*:
  • cpe:2.3:o:google:android:5.0.2:*:*:*:*:*:*:*:
  • cpe:2.3:o:google:android:5.1:*:*:*:*:*:*:*:
  • cpe:2.3:o:google:android:5.1.0:*:*:*:*:*:*:*:
  • cpe:2.3:o:google:android:5.1.1:*:*:*:*:*:*:*:
  • cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*:
  • cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*:
  • cpe:2.3:h:samsung:galaxy_s4:-:*:*:*:*:*:*:*:
  • cpe:2.3:h:samsung:galaxy_s4:-:*:*:*:*:*:*:*:
  • cpe:2.3:h:samsung:galaxy_s4_mini:-:*:*:*:*:*:*:*:
  • cpe:2.3:h:samsung:galaxy_s4_mini:-:*:*:*:*:*:*:*:
  • cpe:2.3:h:samsung:galaxy_s5:-:*:*:*:*:*:*:*:
  • cpe:2.3:h:samsung:galaxy_s5:-:*:*:*:*:*:*:*:
  • cpe:2.3:h:samsung:galaxy_s6:-:*:*:*:*:*:*:*:
  • cpe:2.3:h:samsung:galaxy_s6:-:*:*:*:*:*:*:*:
  • cpe:2.3:h:samsung:galaxy_s7:-:*:*:*:*:*:*:*:
  • cpe:2.3:h:samsung:galaxy_s7:-:*:*:*:*:*:*:*: