CVE-2016-9567

The mDNIe system service on Samsung Mobile S7 devices with M(6.0) software does not properly restrict setmDNIeScreenCurtain API calls, enabling attackers to control a device's screen. This can be exploited via a crafted application to eavesdrop after phone shutdown or record a conversation. The Samsung ID is SVE-2016-6343.

• CWE-200

• http://security.samsungmobile.com/smrupdate.html#SMR-NOV-2016Vendor Advisory
• http://www.securityfocus.com/bid/94494Third Party Advisory, VDB Entry
• http://security.samsungmobile.com/smrupdate.html#SMR-NOV-2016Vendor Advisory
• http://www.securityfocus.com/bid/94494Third Party Advisory, VDB Entry

Published

Nov 23, 2016

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2016-9561The che_configure function in libavcodec/aacdec_template.c i…
• CVE-2016-9562SAP NetWeaver AS JAVA 7.4 allows remote attackers to cause a…7.5
• CVE-2016-9563BC-BMT-BPM-DSK in SAP NetWeaver AS JAVA 7.5 allows remote au…6.5
• CVE-2016-9564Buffer overflow in send_redirect() in Boa Webserver 0.92r al…
• CVE-2016-9565MagpieRSS, as used in the front-end component in Nagios Core…
• CVE-2016-9566base/logging.c in Nagios Core before 4.2.4 allows local user…
• CVE-2016-9568A security design issue can allow an unprivileged user to in…
• CVE-2016-9569The cbstream.sys driver in Carbon Black 5.1.1.60603 allows l…
• CVE-2016-9570cb.exe in Carbon Black 5.1.1.60603 allows attackers to cause…
• CVE-2016-9571Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
• CVE-2016-9572A NULL pointer dereference flaw was found in the way openjpe…5.9
• CVE-2016-9573An out-of-bounds read vulnerability was found in OpenJPEG 2.…6.5