CVE-2015-9011: An elevation of privilege vulnerability in Qualcomm closed source components.

Security readout for executives and security teams

This CVE describes a privilege-escalation flaw in Qualcomm closed-source components used with the Android kernel. The public bundle does not provide severity, affected device models, or technical detail. Business risk depends on whether managed Android devices use vulnerable Qualcomm-based builds without the relevant Android/OEM security update. Exposure is most likely limited to Android devices using affected Qualcomm kernel/component builds. The bundle identifies Android kernel broadly, not specific Android versions, OEMs, chipsets, or models, so asset-level exposure requires vendor bulletin and device build verification. Handle this as a legacy mobile fleet verification item. It should be prioritized where Android devices process sensitive data, remain unmanaged, or are past vendor support. The public evidence is too incomplete to justify emergency escalation without confirmed affected assets or exploitation evidence. Mitigation focus: Check the Android June 2017 Security Bulletin and OEM advisories for fixed builds covering A-36714882.; Prioritize updating or retiring Android devices that no longer receive OEM kernel or firmware security updates.; Use MDM inventory to identify Qualcomm-based Android devices and their installed security patch levels..

Prepared

Jun 7, 2026, 14:03 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.