CVE-2016-4038 Other in n/a

High 7.8 Published 1 Feb 2017 Updated 6 Aug 2024

A local attacker can exploit an array index error in the Samsung Android kernel camera driver, potentially causing unspecified impacts.

Exploited in the wild: Not known
Login needed: Any signed-in user
Attackable: Local or same network only
Victim action needed: Not needed
Fix: None listed

What is CVE-2016-4038?

CVE-2016-4038 is a high-severity vulnerability in n/a, published on 1 Feb 2017. It can only be exploited from the same machine or local network, with no action from the victim.

Official description

Array index error in the msm_sensor_config function in kernel/SM-G9008V_CHN_KK_Opensource/Kernel/drivers/media/platform/msm/camera_v2/sensor/msm_sensor.c in Samsung devices with Android KK(4.4) or L and an APQ8084, MSM8974, or MSM8974pro chipset allows local users to have unspecified impact via the gpio_config.gpio_name value.

Weakness: CWE-20

Which versions are affected by CVE-2016-4038?

It affects 1 product.

Products include Samsung Samsung Mobile.

How do I fix CVE-2016-4038?

No fix has been published for CVE-2016-4038 yet. Limit exposure of the affected software until one is available.

Is CVE-2016-4038 being exploited?

There is no known exploitation of CVE-2016-4038 in the wild and no public exploit code.

Sources

Also known as GHSA-hv9v-4hr7-x39p.