NetSight
critical9.8

CVE-2016-7990

On Samsung Galaxy S4 through S7 devices, an integer overflow condition exists within libomacp.so when parsing OMACP messages (within WAP Push SMS messages) lea…

Impact

On Samsung Galaxy S4 through S7 devices, an integer overflow condition exists within libomacp.so when parsing OMACP messages (within WAP Push SMS messages) leading to a heap corruption that can result in Denial of Service and potentially remote code execution, a subset of SVE-2016-6542.

Affected products

VendorProductAffected versions
GoogleAndroid
Versions 4.2.2, 4.3, 4.3.1, 4.4, 4.4.1, 4.4.2

Weakness classification

References