CVE-2016-10380 In all Qualcomm products with Android releases from CAF using the Linux kernel, the UE can send unprotected MeasurementReports revealing UE location.
CriticalCVSS 9.8
EPSS 1.0%
- Published
- Updated
- Exploit status
- No public exploit known
Description
In all Qualcomm products with Android releases from CAF using the Linux kernel, the UE can send unprotected MeasurementReports revealing UE location.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Google Android | All versions | No fix listed |
| qualcomm Snapdragon Mobile, Snapdragon Wear | = MDM9206, MDM9615, MDM9635M, MDM9640, SD 210/SD 212/SD 205, SD 400, SD 410/12, SD 800, SD 810, SD 820 | No fix listed |
References
- 103671 vdb-entry
- source.android.com vendor-advisory
- source.android.com