CVE-2016-10438

CVE-2016-10438 is an information exposure vulnerability affecting numerous Qualcomm Small Cell SoC, Snapdragon Mobile, and Snapdragon Wear products with security patch levels prior to April 5, 2018. This flaw stems from the logging of debug statements using the %p format specifier, which can inadvertently reveal sensitive information. Rated with a CVSS score of 7.5 (HIGH), this vulnerability is remotely exploitable with low attack complexity, requiring no user interaction. A successful exploit could lead to a high impact on confidentiality, allowing an attacker to gain access to sensitive data. Currently, there is no evidence of active exploitation, nor are there publicly available exploit codes in Metasploit, Nuclei, or ExploitDB. Community discussion and media coverage for this CVE are minimal, indicating a low level of public awareness or concern.