CVE-2017-6426: An information disclosure vulnerability in the Qualcomm SPMI driver.

Security readout for executives and security teams

CVE-2017-6426 is an information disclosure issue in Android kernel code for Qualcomm’s SPMI driver. The available sources do not describe what data could be exposed, the required attacker access, or affected device models. Treat exposure as limited to Android devices or builds that include the vulnerable Qualcomm driver and lack the April 2017 Android security bulletin fixes. Likely exposure is Qualcomm-based Android devices or custom Android kernel builds containing the vulnerable SPMI driver and missing the relevant April 2017 Android security update. Exact models and kernel versions are not identified in the provided sources. Prioritize as a patch-verification item for legacy Qualcomm Android fleets. Business urgency depends on whether affected devices remain deployed and unpatched; the available evidence is too limited to justify a higher severity claim. Mitigation focus: Apply the relevant April 2017 Android security bulletin updates through the device or OEM channel.; Verify affected Android devices have an April 2017 or later security patch level covering this issue.; For custom kernels, check vendor guidance for Android ID A-33644474 and QC-CR#1106842..

Prepared

Jun 7, 2026, 14:03 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.