CVE-2015-9127: In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon W...

Security readout for executives and security teams

This is a Qualcomm Snapdragon Android vulnerability in older devices or firmware before the 2018-04-05 Android security patch level. The issue can cause a null pointer dereference in the Playready App when a large buffer allocation value is handled. The public bundle does not provide severity, CVSS, or confirmed business impact beyond the defect description. Exposure is most likely in legacy Android phones, tablets, embedded Android devices, or wearables using the listed Snapdragon chipsets and patch levels before 2018-04-05. Modern, supported Android builds should be less likely to remain exposed, but OEM patch history must be checked. Handle this as legacy mobile and wearable fleet risk. It does not have confirmed active exploitation in the supplied sources, but devices missing 2018-era Android security updates are broadly risky and may be unsupported. Prioritize visibility, patch verification, and lifecycle replacement. Mitigation focus: Update affected devices to Android security patch level 2018-04-05 or later where available.; Check OEM or Qualcomm guidance for device-specific firmware availability.; Retire or isolate unsupported affected Android and Snapdragon Wear devices..

Prepared

Jun 7, 2026, 14:03 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.