CVE-2016-10386: In all Qualcomm products with Android releases from CAF using the Linux kernel, an array index out of bound...

Security readout for executives and security teams

This is a Qualcomm Android kernel issue in the LPP component where bad indexing can access memory outside an array. The public record does not state practical impact, severity score, or confirmed exploitation. Exposure matters mainly for older Android devices using listed Snapdragon Mobile or Wear platforms and vendor firmware derived from CAF kernel releases. Organizations are most likely exposed through legacy Android phones, embedded cellular devices, or wearables using the listed Qualcomm Snapdragon Mobile, Snapdragon Wear, or modem platforms that have not received the relevant OEM Android security updates. Set priority based on affected device presence. This is not enough evidence for emergency action, but legacy Qualcomm Android fleets should be reviewed because kernel-level vendor issues often depend on OEM patch delivery and unsupported devices may remain exposed. Mitigation focus: Identify devices using the listed Qualcomm platforms and Android CAF-derived kernels.; Check OEM and Android bulletin guidance for firmware containing the relevant Qualcomm fixes.; Prioritize updates for internet-connected, enterprise-managed, or safety-sensitive Android devices..

Prepared

Jun 12, 2026, 21:19 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.