CVE-2016-6587: An Information Disclosure vulnerability exists in the mid.dat file stored on the SD card in Symantec Norton...

Security readout for executives and security teams

This issue affects older Symantec Norton Mobile Security for Android releases. A sensitive file named mid.dat could be stored on an SD card, allowing a local malicious user to obtain sensitive information. The source bundle does not define the exact data exposed or business impact. Exposure appears limited to Android devices running Norton Mobile Security before 3.16, especially where the mid.dat file exists on SD card storage. Environments without that product or already on 3.16 or later are not indicated as affected by the source bundle. Handle as a targeted mobile hygiene issue unless affected devices are widespread or hold sensitive business data. Prioritize inventory and upgrade confirmation over emergency response, because active exploitation is not supported by the provided sources. Mitigation focus: Upgrade Norton Mobile Security for Android to version 3.16 or later.; Check Symantec/Broadcom advisory guidance before approving any exception.; Remove or retire unmanaged devices running affected versions..

Prepared

Jun 6, 2026, 03:31 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.