CVE-2016-4032

Samsung SM-G920F build G920FXXU2COH2 (Galaxy S6), SM-N9005 build N9005XXUGBOK6 (Galaxy Note 3),...

4.6 Medium

CVE-2016-4032 is a medium vulnerability (CVSS 4.6) in Samsung Galaxy Note 3 Firmware, published April 13, 2017. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.43%, the 37th percentile. No source names a fixed version.

Samsung SM-G920F build G920FXXU2COH2 (Galaxy S6), SM-N9005 build N9005XXUGBOK6 (Galaxy Note 3), GT-I9192 build I9192XXUBNB1 (Galaxy S4 mini), GT-I9195 build I9195XXUCOL1 (Galaxy S4 mini LTE), and GT-I9505 build I9505XXUHOJ2 (Galaxy S4) devices do not block AT+USBDEBUG and AT+WIFIVALUE, which allows attackers to modify Android settings by leveraging AT access, aka SVE-2016-5301.

Attack profile

How easy it is to exploit

Attack vector: Physical
Complexity: Low
Privileges needed: None
User interaction: None

What an attacker can affect

Confidentiality: None
Integrity: High
Availability: None

Exploit likelihood

0.43%Down 0.5 points since Jun 1, 2022

What each source reports

NVD Score used 4.6

Record: CVE-2016-4032
CVSS 3.0: 4.6 MediumCVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
CVSS 2.0: 2.1 LowAV:L/AC:L/Au:N/C:N/I:P/A:N
Weakness: CWE-284
Updated: 2026-11-02

CVE List No score

Record: CVE-2016-4032
Updated: 2026-11-02

EUVDEUVD-2016-5038 No score

Record: EUVD-2016-5038
Updated: 2026-11-03

GitHub AdvisoriesGHSA-q3vh-9hx4-f8m5 4.6

Samsung SM-G920F build G920FXXU2COH2 (Galaxy S6), SM-N9005 build N9005XXUGBOK6 (Galaxy Note 3),...

Record: GHSA-q3vh-9hx4-f8m5
CVSS 3.0: 4.6 MediumCVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Weakness: CWE-284
Updated: 2026-11-02

Affected products

History

History
When	Changed	Sources
2026-11-03	aliases	EUVD
2026-11-02	created	CVE List, GitHub Advisories, NVD