CVE-2016-7991

CVE-2016-7991 is a high-severity vulnerability affecting Samsung Galaxy S4 through S7 devices, where the "omacp" app fails to properly validate security information in OMACP messages. This allows remote, unsolicited WAP Push SMS messages to be accepted and processed, leading to unauthorized configuration changes. With a CVSS score of 7.5, this vulnerability is easily exploitable over the network without user interaction, resulting in high integrity impact. While there is no known active exploitation or public exploit code (Metasploit, Nuclei, ExploitDB), it has garnered some community discussion and media coverage, including a BleepingComputer article highlighting its potential for ransomware attacks.