CVEs-PoC/2016/CVE-2016-11038.md

CVE-2016-11038

Description

An issue was discovered on Samsung mobile devices with software through 2016-04-05 (incorporating the Samsung Professional Audio SDK). The Jack audio service doesn't implement access control for shared memory, leading to arbitrary code execution or privilege escalation. The Samsung ID is SVE-2016-5953 (July 2016).

POC

Reference

• https://security.samsungmobile.com/securityUpdate.smsb
• https://security.samsungmobile.com/securityUpdate.smsb

Github

No PoCs found on GitHub currently.