© 2026 vulntracker.io

CVE-2016-4038

N/A

Published: February 1, 2017 at 03:00 PM UTC

Updated: June 17, 2026 at 12:46 AM UTC

4 products affected across 1 vendorSamsung MobileMsm8974Apq8084

Using N/A by N/A?

Get instant alerts when new vulnerabilities affect N/A - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

N/A

Exploit prediction

EPSS 0.4%

Description

Array index error in the msm_sensor_config function in kernel/SM-G9008V_CHN_KK_Opensource/Kernel/drivers/media/platform/msm/camera_v2/sensor/msm_sensor.c in Samsung devices with Android KK(4.4) or L and an APQ8084, MSM8974, or MSM8974pro chipset allows local users to have unspecified impact via the gpio_config.gpio_name value.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Samsung Mobile · Samsung

95%

samsung-apq8084 (environment) · samsung-msm8974 (environment) · samsung-msm8974pro (environment)

Apq8084 · Samsungdevice

80%

All versions

Msm8974 · Samsungdevice

80%

All versions

Msm8974Pro · Samsungdevice

80%

All versions

Remediation

No guide yet

No remediation guidance has been written for this CVE yet. What the record does show:

Patch and advisory references

http://security.samsungmobile.com/smrupdate.html#SMR-JAN-2016

References (3)

x_refsource_CONFIRMVendor Advisory

Source: [email protected]

http://security.samsungmobile.com/smrupdate.html#SMR-JAN-2016

Mailing Listx_refsource_MLISTThird Party Advisory

Source: [email protected]

http://www.openwall.com/lists/oss-security/2016/04/17/2

Mailing Listx_refsource_MLISTThird Party Advisory

Source: [email protected]

http://www.openwall.com/lists/oss-security/2016/04/18/8

CVSS

7.2HIGH[email protected]

Confidentiality: COMPLETE
Integrity: COMPLETE
Availability: COMPLETE

Vector?

Quick Info

StatusMODIFIED

CWE

CWE-20

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Create account Sign in

Free plan, no card