CVE-2015-8937: drivers/char/diag/diagchar_core.c in the Qualcomm components in Android before 2016-08-05 on Nexus 5, 6, an...

Security readout for executives and security teams

This is a privilege-escalation flaw in Qualcomm Android components used on Nexus 5, Nexus 6, and Nexus 7 (2013) before the August 5, 2016 Android security level. A malicious app could gain higher privileges on an affected device. The provided sources do not show active exploitation. Exposure is most likely limited to legacy Nexus 5, Nexus 6, and Nexus 7 (2013) devices running Android security patch levels before 2016-08-05 with Qualcomm components present. Prioritize remediation if these legacy Nexus devices remain in business use. The issue enables local privilege escalation, but urgency is lower where affected devices are retired or fully patched. Mitigation focus: Update affected devices to Android security patch level 2016-08-05 or later where supported.; Retire or isolate Nexus devices that cannot receive the relevant Android security update.; Check Android and device-vendor guidance before assuming equivalent Qualcomm-device coverage..

Prepared

Jun 13, 2026, 14:00 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.