CVE-2016-11028

CRITICAL · CVSS 9.8 EPSS 0.44%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2020-04-07 · Last synced 2026-08-04

Field Assessment

AI analysis pending.

CVE

CVE-2016-11028

Severity

CRITICAL

CVSS

9.8

EPSS

0.44%

Original Filing — NVD Description

An issue was discovered on Samsung mobile devices with software through 2016-09-13 (Exynos AP chipsets). There is a stack-based buffer overflow in the OTP TrustZone trustlet. The Samsung IDs are SVE-2016-7173 and SVE-2016-7174 (December 2016).