CVE-2016-10297: In TrustZone in all Android releases from CAF using the Linux kernel, a Time-of-Check Time-of-Use Race Cond...

Security readout for executives and security teams

This CVE describes a possible race condition in Qualcomm TrustZone code used by Android releases from CAF with the Linux kernel. TrustZone is a high-privilege device security environment, so exposure can matter, but the public record does not provide severity, impact, or exploit detail. Potential exposure is Qualcomm-based Android devices or builds derived from CAF Linux-kernel Android releases. The public data is too broad to determine exact models, chipsets, firmware branches, or vulnerable versions. Treat this as a patch-governance issue unless vendor data shows direct exposure. The component is sensitive, but current public evidence lacks severity and exploitation detail, so prioritize confirming device applicability and update status. Mitigation focus: Check OEM and Qualcomm guidance for CVE-2016-10297 applicability.; Apply relevant Android security updates from affected device vendors.; Prioritize unsupported Qualcomm Android devices for replacement or isolation..

Prepared

Jun 13, 2026, 04:43 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.