CVE-2016-10499: In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon W...

Security readout for executives and security teams

CVE-2016-10499 is a Qualcomm Snapdragon issue affecting Android devices below the 2018-04-05 security patch level. Repeated IKE rekey activity can cause a memory leak in the IPSecurity module, potentially degrading device reliability. The sources do not provide CVSS, exploit status, or detailed attacker prerequisites. Exposure is most likely on older Android phones, wearables, and embedded devices using the listed Snapdragon chipsets with security patch levels earlier than 2018-04-05, especially where IPsec/IKE VPN functionality is enabled or used. Treat this as a legacy-device hygiene issue unless affected devices support critical operations or exposed VPN workflows. The main decision is whether impacted devices can be patched, isolated, or retired. Urgency rises where unsupported Android devices remain in production. Mitigation focus: Verify OEM firmware includes the 2018-04-05 Android security patch level or later.; Check Qualcomm and Android vendor guidance for model-specific update availability.; Prioritize replacement or isolation of unsupported affected Android and wearable devices..

Prepared

Jun 7, 2026, 13:40 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.