CVE-2019-16256

Published: Sep 12, 2019Modified: Jun 17, 2026CISA KEV

9.8

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Exploitability: 3.9 / Impact: 5.9

Source: NVD

Description

Some Samsung devices include the SIMalliance Toolbox Browser (aka S@T Browser) on the UICC, which might allow remote attackers to retrieve location and IMEI information, or retrieve other data or execute certain commands, via SIM Toolkit (STK) instructions in an SMS message, aka Simjacker.

Affected (1)

Products: Trustedconnectivityalliance: S@t Browser

Trustedconnectivityalliance

1 product

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Trustedconnectivityalliance S@t Browser	All versions

References (3)

https://www.adaptivemobile.com/blog/simjacker-next-generation-spying-over-mobile

Source: cve@mitre.org

ExploitThird Party Advisory

https://www.adaptivemobile.com/blog/simjacker-next-generation-spying-over-mobile

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitThird Party Advisory

https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2019-16256

Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0

US Government Resource

Timeline

No history available yet.