CVE-2016-11038

An issue was discovered on Samsung mobile devices with software through 2016-04-05 (incorporating the Samsung Professional Audio SDK). The Jack audio service doesn't implement access control for shared memory, leading to arbitrary code execution or privilege escalation. The Samsung ID is SVE-2016-5953 (July 2016).

Score

CVSS 3.1 9.8 Critical

Status

Modified - cve@mitre.org

Published

2020-04-07

Last modified

2024-08-06

Weaknesses

CWE-119

Affected products

• Android (Google)

References

• https://security.samsungmobile.com/securityUpdate.smsb