CVE-2016-10380

Critical

Published: 18/08/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

All Qualcomm products with Android releases from CAF using the Linux kernel are vulnerable to revealing the end user's (UE) location through unprotected MeasurementReports.

Risk Assessment

The disclosure of the end user's location may lead to privacy violations and increased risk of tracking by unauthorized entities.

Recommendation

It is recommended to update Qualcomm products to the latest versions that address this vulnerability and implement additional privacy protection measures for users.

Original NVD description (English source)

In all Qualcomm products with Android releases from CAF using the Linux kernel, the UE can send unprotected MeasurementReports revealing UE location.