CVE-2015-9112: In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile and Snapdrag...

Security readout for executives and security teams

CVE-2015-9112 is a Qualcomm Android platform issue in QSEE, the Qualcomm secure execution environment. On listed Snapdragon Automobile and Mobile chipsets, missing input validation could cause a buffer overflow. The sources do not provide CVSS scoring, impact detail, or evidence of active exploitation. Exposure is most likely in legacy Android or embedded/automotive devices using the named Qualcomm chipsets and missing the 2018-04-05 Android security patch level. Modern managed fleets are less likely exposed if patch compliance is enforced. Treat this as a legacy platform hygiene issue with uncertain severity. The main business risk is unmanaged or unsupported Android and embedded devices carrying old Qualcomm firmware. Prioritize inventory and patch verification before broader remediation spend. Mitigation focus: Upgrade affected Android devices to the 2018-04-05 security patch level or later where available.; Check OEM and Qualcomm guidance for device-specific firmware availability.; Prioritize replacement where legacy devices cannot receive vendor security updates..

Prepared

Jun 7, 2026, 14:03 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.