CVE-2016-10461: In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile MDM9650, SD 650/...

Security readout for executives and security teams

This is a legacy Android/Qualcomm issue affecting certain Snapdragon-based devices that had not received the April 5, 2018 Android security patch level. The described flaw is missing bounds checking that could cause a buffer overread. Public sources do not provide severity scoring, business impact detail, or evidence of active exploitation. Exposure is most likely in older Android devices using the listed Qualcomm Snapdragon chipsets and running a security patch level before 2018-04-05. Modern managed devices should be checked by Android patch level and hardware inventory. Non-Android Qualcomm uses are not established by the provided sources. Set priority based on device presence. If the organization still operates affected pre-April-2018 Android devices, remediation should be handled as mobile fleet risk reduction. If no such devices exist, the business urgency is low, but evidence should be retained for audit closure. Mitigation focus: Update affected Android devices to the 2018-04-05 security patch level or later.; Check OEM or carrier firmware guidance for devices using the listed Qualcomm chipsets.; Retire devices that cannot receive security updates past the affected patch level..

Prepared

Jun 7, 2026, 13:40 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.