CVSS 3.1
9.8 criticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HCVE-2019-16256
Critical (9.8) in SIMalliance Toolbox Browser. In CISA KEV since 2021-11-03. EPSS 4.9% chance of exploitation in the next 30 days.
Some Samsung devices include the SIMalliance Toolbox Browser (aka S@T Browser) on the UICC, which might allow remote attackers to retrieve location and IMEI information, or retrieve other data or execute certain commands, via SIM Toolkit (STK) instructions in an SMS message, aka Simjacker.
Severity
- EPSS
- 4.9% chance of exploitation in the next 30 days; higher than 92% of CVEs (scores of 2026-10-31)
- CISA KEV
- listed 2021-11-03, due 2022-05-03
- Published
- Modified
- Record from
- the NVD, synced
Affected
- trustedconnectivityalliance:s\@t_browser