CVE-2016-10291: An elevation of privilege vulnerability in the Qualcomm Slimbus driver could enable a local malicious appli...

Security readout for executives and security teams

CVE-2016-10291 is an Android kernel privilege escalation issue in the Qualcomm Slimbus driver. A malicious local app could run code with kernel privileges, but the Android bulletin says exploitation first requires compromising a privileged process. This makes it serious for affected devices, but not a remote-first compromise based on the supplied evidence. Exposure is limited to Android devices running the documented affected Kernel-3.10 code path with the Qualcomm Slimbus driver. Real fleet exposure depends on device model, OEM kernel build, and whether the May 2017 Android security bulletin fixes were incorporated. Treat this as a high-priority legacy Android exposure issue, especially where old Qualcomm-based devices remain in business use. It is less urgent than a remotely exploited KEV issue, but kernel compromise impact justifies rapid inventory and patch verification. Mitigation focus: Apply Android or OEM firmware updates covering the 2017-05-01 security bulletin.; Confirm affected devices reached a patch level that includes CVE-2016-10291 remediation.; Prioritize unsupported Android Kernel-3.10 devices for replacement or isolation..

Prepared

Jun 13, 2026, 05:01 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.