CVE-2016-9278

The Samsung Exynos fimg2d driver for Android with Exynos 5433, 54xx, or 7420 chipsets allows local users to cause a denial of service (kernel panic) via a crafted ioctl command. The Samsung ID is SVE-2016-6736.

• CWE-20

• http://security.samsungmobile.com/smrupdate.html#SMR-NOV-2016Vendor Advisory
• http://www.openwall.com/lists/oss-security/2016/11/09/3Mailing List, Third Party Advisory
• http://www.openwall.com/lists/oss-security/2016/11/11/11Mailing List, Third Party Advisory
• http://www.securityfocus.com/bid/94283Third Party Advisory, VDB Entry
• http://security.samsungmobile.com/smrupdate.html#SMR-NOV-2016Vendor Advisory
• http://www.openwall.com/lists/oss-security/2016/11/09/3Mailing List, Third Party Advisory
• http://www.openwall.com/lists/oss-security/2016/11/11/11Mailing List, Third Party Advisory
• http://www.securityfocus.com/bid/94283Third Party Advisory, VDB Entry

Published

Jan 18, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2016-9272A Blind SQL Injection Vulnerability in Exponent CMS through …
• CVE-2016-9273tiffsplit in libtiff 4.0.6 allows remote attackers to cause …
• CVE-2016-9274Untrusted search path vulnerability in Git 1.x for Windows a…7.8
• CVE-2016-9275Heap-based buffer overflow in the _dwarf_skim_forms function…7.5
• CVE-2016-9276The dwarf_get_aranges_list function in dwarf_arrange.c in Li…7.5
• CVE-2016-9277Integer overflow in SystemUI in KK(4.4) and L(5.0/5.1) on Sa…
• CVE-2016-9279Use-after-free vulnerability in the Samsung Exynos fimg2d dr…
• CVE-2016-9282SQL Injection in framework/modules/search/controllers/search…
• CVE-2016-9283SQL Injection in framework/core/subsystems/expRouter.php in …
• CVE-2016-9284getUsersByJSON in framework/modules/users/controllers/usersC…
• CVE-2016-9285framework/modules/addressbook/controllers/addressController.…
• CVE-2016-9286framework/modules/users/controllers/usersController.php in E…