CVE-2016-11040: Google Android

Medium severity, CVSS 4.6. EPSS: 0.1% chance of exploitation in the next 30 days.

An issue was discovered on Samsung mobile devices with L(5.0/5.1) (with USB OTG MyFile2014_L_ESS support) software. There is a Factory Reset Protection (FRP) bypass. The Samsung ID is SVE-2015-5068 (June 2016).

Affected products

• Google Android: version 5.0 only; version 5.1 only

Published 2020-04-07. Last modified 2026-06-17.