CVE-2016-5341

CVE-2016-5341 is a medium-severity vulnerability affecting the GPS component in Android versions prior to December 5, 2016. It allows a man-in-the-middle attacker to cause a denial of service, specifically a delay in GPS signal acquisition, by providing a malicious xtra.bin or xtra2.bin file from a spoofed Qualcomm host. The attack vector is network-based with high attack complexity, and the potential impact is limited to denial of service. There is no evidence of active exploitation, publicly available exploit code, or significant community discussion surrounding this vulnerability.