CVE-2015-9133: In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile SD 400, SD 410/1...

Security readout for executives and security teams

This issue affects older Android devices using specific Qualcomm Snapdragon Mobile chipsets. A malformed Widevine video decryption request could trigger an integer overflow in Qualcomm trusted execution code. The supplied sources do not state impact, exploitability, or active abuse, so urgency depends on whether affected legacy devices remain in use. Exposure is most likely in unmanaged, unsupported, or legacy Android fleets with the listed Snapdragon chipsets and Android security patch levels before 2018-04-05. Modern patched devices are less likely exposed based on the Android patch-level reference. Moderate priority for organizations with legacy Android device fleets; lower priority where mobile assets are modern and patched. The main business risk is lingering unsupported devices, not confirmed active exploitation from the supplied evidence. Mitigation focus: Inventory Android devices using the listed Qualcomm Snapdragon chipsets.; Prioritize vendor updates to Android security patch level 2018-04-05 or later.; Retire or isolate devices that cannot receive supported OEM security updates..

Prepared

Jun 7, 2026, 14:03 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.