CVE-2016-10461: Qualcomm MDM9650 Firmware

Critical severity, CVSS 9.8. EPSS: 1.2% chance of exploitation in the next 30 days.

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile MDM9650, SD 650/52, SD 808, SD 810, SD 820, and SDX20, lack of proper bounds checking may lead to a buffer overread.

Affected products

• Qualcomm MDM9650 Firmware: affected versions not specified
• Qualcomm Sd 650 Firmware: affected versions not specified
• Qualcomm Sd 652 Firmware: affected versions not specified
• Qualcomm Sd 808 Firmware: affected versions not specified
• Qualcomm Sd 810 Firmware: affected versions not specified
• Qualcomm Sd 820 Firmware: affected versions not specified
• Qualcomm SDX20 Firmware: affected versions not specified

Published 2018-04-18. Last modified 2026-06-17.