CVE-2016-9966

highpriority · track · 40EPSS 0.019 · 80 %ileEURUUS

grimoire priorityP2 · Scheduled

Exploitable?

—

no known exploitation

Likely / severe?

1.92% (80th) EPSS

CVSS 10 · high

Is it mine?

9 products

Check your exposure

Who says so?

4 sources

cnnvd · enisa_euvd · fstec_bdu · nvd

EPSS · scored 2026-10-27

Lack of appropriate exception handling in some receivers of the Telecom application on Samsung Note devices with L(5.0/5.1), M(6.0), and N(7.0) software allows attackers to crash the system easily resulting in a possible DoS attack, or possibly gain privileges. The Samsung ID is SVE-2016-7120.

cvss

Technical severity, 0–10. One row per scoring source.

10.0

010

base score 0–10 · higher = more severe · hover a vector to decode⚠ sources disagree · high–critical · 9–10

v2.010highAV:N/AC:L/Au:N/C:C/I:C/A:Cprimary · NVD / NIST USexploitability 10 · impact 10

v3.09.8criticalCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:Hprimary · NVD / NIST USexploitability 3.9 · impact 5.9

v2.010criticalAV:N/AC:L/Au:N/C:C/I:C/A:Csecondary · FSTEC (BDU) RU

v3.09criticalCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:Usecondary · CVSS-BT (t0sche)

weaknesses

The CWE weakness classes this flaw belongs to.

CWE-388USprimaryCWE-388US

affected products (9)

Products and version ranges known to be affected.

n/a n/a≤ n/aenisa_euvdEU
Samsung Electronics Samsung Mobile≤ 7.0fstec_bduRU
Samsung Electronics Samsung Mobile≤ 6.0fstec_bduRU
Samsung Electronics Samsung Mobile≤ 5.1fstec_bduRU
Samsung Electronics Samsung Mobile≤ 5.0fstec_bduRU
samsung samsung mobile= 5.0nvdUScpe:2.3:o:samsung:samsung_mobile:*:*:*:*:*:*:*:*
samsung samsung mobile= 5.1nvdUScpe:2.3:o:samsung:samsung_mobile:*:*:*:*:*:*:*:*
samsung samsung mobile= 6.0nvdUScpe:2.3:o:samsung:samsung_mobile:*:*:*:*:*:*:*:*
samsung samsung mobile= 7.0nvdUScpe:2.3:o:samsung:samsung_mobile:*:*:*:*:*:*:*:*

also known as (5)

Other names and identifiers for this entity.

sources

Which sources assert this record, and when.

cnnvd enisa_euvd fstec_bdu nvd NVD CVE.org MITRE

published 2016-12-16modified 2026-06-17

related (148)

Related entries.

ID	severity	EPSS	exploitable	published
CVE-2018-0155US	high8.6OT critical	7.74% (95th)	KEV	2018-03-28
A vulnerability in the Bidirectional Forwarding Detection (BFD) offload implementation of Cisco Catalyst 4500 Series Switches and Cisco Catalyst 4500-X Series Switches could allow…
CVE-2018-1002105US	critical9.8	87.0% (100th)	Exploit	2018-12-05
In all Kubernetes versions prior to v1.10.11, v1.11.5, and v1.12.3, incorrect handling of error responses to proxied upgrade requests in the kube-apiserver allowed specially crafte…
CVE-2025-31650US	high7.5	61.3% (99th)	Exploit	2025-04-28
Improper Input Validation vulnerability in Apache Tomcat. Incorrect error handling for some invalid HTTP priority headers resulted in incomplete clean-up of the failed request whic…
CVE-2017-3737US	medium5.9OT high	78.7% (100th)	—	2017-12-07
OpenSSL 1.0.2 (starting from version 1.0.2b) introduced an "error state" mechanism. The intent was that if a fatal error occurred during a handshake then OpenSSL would move into th…
CVE-2007-1534US	high9.3	13.4% (96th)	—	2007-03-20
DFSR.exe in Windows Meeting Space in Microsoft Windows Vista remains available for remote connections on TCP port 5722 for 2 minutes after Windows Meeting Space is closed, which al…

+143 more

references (5)

External citations — patches, advisories, analysis.

scry

Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.

Free scan