CVE-2016-10381: In all Qualcomm products with Android releases from CAF using the Linux kernel, the UE can send unprotected...

Security readout for executives and security teams

This Qualcomm Android issue could expose a device user’s location because unprotected MeasurementReports may reveal UE location. The public bundle does not provide CVSS, CWE, exploit details, or a confirmed active exploitation statement. Treat it primarily as a privacy and mobile fleet exposure issue for affected Snapdragon Mobile and Wear devices. Exposure is most likely in Android devices or wearables built on the listed Qualcomm Snapdragon and modem platforms, especially OEM builds derived from CAF Linux kernel releases. Confirm exposure through device chipset, Android security patch level, OEM advisory status, and Qualcomm bulletin mapping. Prioritize this for mobile and wearable fleets where location privacy matters, especially executive, field, or regulated environments. There is no evidence of active exploitation in the supplied sources, but affected unsupported devices should be identified and updated or replaced. Mitigation focus: Check OEM and Qualcomm guidance for affected device models and firmware availability.; Prioritize updates for fleets using listed Snapdragon Mobile or Snapdragon Wear platforms.; Verify Android security patch levels against the referenced Android security bulletins..

Prepared

Jun 12, 2026, 21:19 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.