Approved changes feed: RSS · Atom

cpe:2.3:o:samsung:galaxy_s6_firmware:g920fxxu2coh2:*:*:*:*:*:*:*

part: o version: g920fxxu2coh2 update: *

VendorSamsung (0eb241f7-997b-5d1c-b2a3-00a89e1049d3)
ProductGalaxy S6 Firmware (fc552db6-bab3-5842-b5dd-bfb217e0fff2)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2016-4032 vulnerable 2026-06-08 05:07:46.461657 Details available
Samsung SM-G920F build G920FXXU2COH2 (Galaxy S6), SM-N9005 build N9005XXUGBOK6 (Galaxy Note 3), GT-I9192 build I9192XXUBNB1 (Galaxy S4 mini), GT-I9195 build I9195XXUCOL1 (Galaxy S4 mini LTE), and GT-I9505 build I9505XXUHOJ2 (Galaxy S4) devices do not block AT+USBDEBUG and AT+WIFIVALUE, which allows attackers to modify Android settings by leveraging AT access, aka SVE-2016-5301.
Published: 2017-04-13T16:00:00.000Z
Updated: 2024-08-06T00:17:29.844Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-4031 vulnerable 2026-06-08 05:07:46.460936 Details available
Samsung SM-G920F build G920FXXU2COH2 (Galaxy S6), SM-N9005 build N9005XXUGBOK6 (Galaxy Note 3), GT-I9192 build I9192XXUBNB1 (Galaxy S4 mini), GT-I9195 build I9195XXUCOL1 (Galaxy S4 mini LTE), and GT-I9505 build I9505XXUHOJ2 (Galaxy S4) devices allow attackers to send AT commands by plugging the device into a Linux host, aka SVE-2016-5301.
Published: 2017-04-13T16:00:00.000Z
Updated: 2024-08-06T00:17:30.670Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-4030 vulnerable 2026-06-08 05:07:46.456216 Details available
Samsung SM-G920F build G920FXXU2COH2 (Galaxy S6), SM-N9005 build N9005XXUGBOK6 (Galaxy Note 3), GT-I9192 build I9192XXUBNB1 (Galaxy S4 mini), GT-I9195 build I9195XXUCOL1 (Galaxy S4 mini LTE), and GT-I9505 build I9505XXUHOJ2 (Galaxy S4) devices have unintended availability of the modem in USB configuration number 2 within the secure lockscreen state, allowing an attacker to make phone calls, send text messages, or issue commands, aka SVE-2016-5301.
Published: 2017-04-13T16:00:00.000Z
Updated: 2024-08-06T00:17:30.659Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-2567 vulnerable 2026-06-08 05:07:42.656221 Details available
secfilter in the Samsung kernel for Android on SM-N9005 build N9005XXUGBOB6 (Note 3) and SM-G920F build G920FXXU2COH2 (Galaxy S6) devices allows attackers to bypass URL filtering by inserting an "exceptional URL" in the query string, as demonstrated by the http://should-have-been-filtered.example.com/?http://google.com URL.
Published: 2017-04-13T16:00:00.000Z
Updated: 2024-08-05T23:32:20.995Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-2566 vulnerable 2026-06-08 05:07:42.655869 Details available
Samsung SecEmailSync on SM-G920F build G920FXXU2COH2 (Galaxy S6) devices has SQL injection, aka SVE-2015-5081.
Published: 2017-04-13T16:00:00.000Z
Updated: 2024-08-05T23:32:20.984Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-2565 vulnerable 2026-06-08 05:07:42.654848 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-2036 vulnerable 2026-06-08 05:07:32.679857 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.