CVE-2016-10391

9.8 criticalEPSS 0.9%

Critical (9.8) in google android. EPSS 0.9% chance of exploitation in the next 30 days.

In all Qualcomm products with Android releases from CAF using the Linux kernel, the length in an HCI command is not properly checked for validity.

Severity

9.8 critical

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 0.9% chance of exploitation in the next 30 days; higher than 59% of CVEs (scores of 2026-10-31)
CWE: CWE-20
Published: 2017-08-18
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19