CVE Catalog

CVE-2016-10381

Critical
Published: Translated: NVD NIST

Summary

All Qualcomm products with Android releases from CAF using the Linux kernel are vulnerable to an issue where the UE can send unprotected MeasurementReports revealing UE location.

Risk Assessment

The disclosure of the end user's location may lead to privacy violations and potential personal security threats.

Recommendation

It is recommended to update the software to the latest version to minimize the risk associated with location disclosure.

Original NVD description (English source)

In all Qualcomm products with Android releases from CAF using the Linux kernel, the UE can send unprotected MeasurementReports revealing UE location.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS