CVE-2016-10391 | BDVDB-2026-89313 Detail

QualcommAll Qualcomm products

Description#

In all Qualcomm products with Android releases from CAF using the Linux kernel, the length in an HCI command is not properly checked for validity.

No impact statement in the source data.

No weakness recorded in the source data.

No public exploit known

No score available.

less than 1%, Very Low

Estimated chance of exploitation in the next 30 days. EPSS percentile: 59.8.

Not listed in the CISA Known Exploited Vulnerabilities catalog.

Not classified

No specific action is recorded in the source data. Check the references for vendor guidance.

Vulnerable
All Android releases from CAF using the Linux kernel
Fixed
Not stated

Not available

Not available

Not available

Not available

Source: CVE List v5 (record); CISA KEV (kev, action); FIRST EPSS (epss).