CVE-2016-5345: Buffer overflow in the Qualcomm radio driver in Android before 2017-01-05 on Android One devices allows loc...

Security readout for executives and security teams

CVE-2016-5345 is a buffer overflow in the Qualcomm radio driver used by Android One devices before the 2017-01-05 Android security update. A malicious local application could gain elevated privileges. The bundle does not show internet-remote exploitation or active exploitation. Likely exposure is legacy Android One devices with Qualcomm radio driver firmware or kernel builds older than the 2017-01-05 Android security patch level. Unsupported devices are the main concern. Prioritize remediation where legacy Android One devices still access corporate data. Business urgency is lower for retired devices, but high for active unmanaged devices because a malicious app could escalate privileges. Mitigation focus: Update affected devices to Android security patch level 2017-01-05 or later.; Check OEM or Android vendor guidance for device-specific firmware availability.; Retire Android One devices that cannot receive the January 2017 security update..

Prepared

Jun 7, 2026, 20:58 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.