CVE-2015-8893: app/aboot/aboot.c in the Qualcomm bootloader in Android before 2016-07-05 on Nexus 5 and 7 (2013) devices a...

Security readout for executives and security teams

This is an old Android bootloader flaw affecting Nexus 5 and Nexus 7 (2013) devices before the 2016-07-05 Android security update. A malicious app could trigger a device outage or related memory over-read behavior. The business risk is mainly legacy-device disruption, not a currently evidenced widespread campaign. Exposure appears limited to Nexus 5 and Nexus 7 (2013) devices running Android security patch levels before 2016-07-05. Modern supported Android fleets are unlikely to be exposed unless legacy devices remain in use. Treat this as a legacy asset hygiene issue. It does not justify emergency response without exposed old Nexus devices, but any affected device should be patched or retired because the impacted component is low-level bootloader code. Mitigation focus: Identify any Nexus 5 or Nexus 7 (2013) devices still in use.; Update affected devices to Android guidance covering 2016-07-05 or later.; Retire devices that cannot receive the relevant Android security update..

Prepared

Jun 13, 2026, 14:22 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.