CVE-2017-10996: In all Qualcomm products with Android releases from CAF using the Linux kernel, out of bounds access is pos...

Security readout for executives and security teams

This CVE describes a Qualcomm Android kernel issue from CAF releases where a malformed internal string table can cause out-of-bounds access. The cited impact is device crash or reboot, not confirmed data theft or code execution. Exposure is limited to Qualcomm products using Android CAF Linux kernel releases affected by the 2017 Android security bulletin. The source bundle does not identify specific device models, kernel versions, or CPEs. Treat this as a moderate operational stability risk for older Qualcomm Android fleets. Urgency depends on whether affected devices remain in production and whether security updates are still available. Mitigation focus: Review the Android September 2017 security bulletin and relevant Qualcomm or OEM advisories.; Apply vendor-provided Android security updates or firmware for affected Qualcomm CAF-based devices.; Prioritize devices with unexplained kernel crashes, reboots, or old Android security patch levels..

Prepared

Jun 12, 2026, 20:56 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.