CVE-2015-8890: platform/msm_shared/partition_parser.c in the Qualcomm components in Android before 2016-07-05 on Nexus 5 a...

Security readout for executives and security teams

This flaw affected Qualcomm Android partition parsing on Nexus 5 and Nexus 7 (2013) before the July 5, 2016 Android security update. A crafted MMC could bypass intended access restrictions. The public bundle does not provide CVSS, CWE, or confirmed exploitation evidence. Exposure appears limited to Nexus 5 and Nexus 7 (2013) devices running Android builds before 2016-07-05 with the affected Qualcomm component. Broader product impact is not established in the provided sources. Treat this as a legacy mobile-platform risk. Priority is highest where old Nexus devices remain operational, especially in sensitive environments. With no supplied exploitation or severity data, urgency depends on whether affected devices still exist in the estate. Mitigation focus: Apply Android security updates from July 5, 2016 or later where available.; Retire affected Nexus devices that cannot receive the relevant Android security patch.; Check OEM or vendor guidance for devices using related Qualcomm components..

Prepared

Jun 13, 2026, 14:22 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.