CVE-2016-10467: In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile and Snapdrag...

Security readout for executives and security teams

This CVE concerns older Android builds on specific Qualcomm Snapdragon mobile and automotive chips. A Qualcomm cryptographic padding verification function made an unsafe size assumption for rare RSA key shapes. The public sources identify affected chipsets and the Android patch level, but do not state business impact, CVSS severity, or active exploitation. Likely exposure is legacy Android or embedded automotive devices using the named Qualcomm Snapdragon platforms with security patch levels before 2018-04-05. Modern supported devices should be checked by patch level and OEM firmware status, not chipset name alone. Set priority based on asset sensitivity and whether affected legacy devices remain in production. The age of the issue lowers urgency for fully patched fleets, but unsupported mobile or automotive endpoints should be tracked and remediated. Mitigation focus: Update affected devices to Android security patch level 2018-04-05 or later.; Check OEM firmware bulletins for Qualcomm-specific fixes and supported builds.; Prioritize unsupported devices for replacement or compensating controls..

Prepared

Jun 7, 2026, 13:40 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.