CVE-2016-10466: In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon W...

Security readout for executives and security teams

This Android/Qualcomm issue could make SSL/TLS randomness predictable if a Qualcomm crypto random-number call fails during a handshake. The software then uses a hard-coded value, which can weaken secure connections on affected Snapdragon Mobile and Snapdragon Wear devices that have not reached the 2018-04-05 Android patch level. Exposure is most likely in older Android phones, wearables, and embedded devices using the listed Qualcomm chipsets and running security patch levels before 2018-04-05. Unsupported or unmanaged devices are the main concern. Treat this as a legacy-device exposure issue. It does not have confirmed active exploitation in the provided sources, but unmanaged pre-April-2018 Android devices using affected Qualcomm platforms should be upgraded, isolated, or replaced. Mitigation focus: Update affected Android devices to the 2018-04-05 security patch level or later.; Check OEM and Qualcomm guidance for device-specific firmware availability.; Retire or isolate devices that cannot receive applicable security updates..

Prepared

Jun 7, 2026, 13:40 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.