Medium severity5.5NVD Advisory· Published Nov 23, 2016· Updated Jun 17, 2026
CVE-2016-9567
CVE-2016-9567
Description
The mDNIe system service on Samsung Mobile S7 devices with M(6.0) software does not properly restrict setmDNIeScreenCurtain API calls, enabling attackers to control a device's screen. This can be exploited via a crafted application to eavesdrop after phone shutdown or record a conversation. The Samsung ID is SVE-2016-6343.
Affected products
3- cpe:2.3:o:samsung:samsung_mobile:6.0:*:*:*:*:*:*:*
- Range: M(6.0)
- Range: M(6.0)
Patches
Vulnerability mechanics
References
2- security.samsungmobile.com/smrupdate.htmlnvdVendor Advisory
- www.securityfocus.com/bid/94494nvdThird Party AdvisoryVDB Entry
News mentions
0No linked articles in our index yet.