CVE-2015-9135: In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon W...

Security readout for executives and security teams

This CVE affects older Android devices using specified Qualcomm Snapdragon Mobile or Wear chipsets when they are below the 2018-04-05 Android security patch level. The public record describes a QTEE syscall handler bug involving an untrusted pointer dereference, but does not state business impact, severity, or confirmed exploitation. Exposure is most likely in legacy Android phones, wearables, or embedded deployments using the listed Qualcomm chipsets and running patch levels before 2018-04-05. Current, supported devices with later security patch levels are less likely to be exposed, subject to OEM firmware coverage. Medium operational priority for organizations still running legacy Android or embedded Qualcomm-based devices. The urgency is driven by asset age and patch status, not confirmed exploitation in the provided sources. Mitigation focus: Confirm affected devices have Android security patch level 2018-04-05 or later.; Check OEM, Android, and Qualcomm guidance for device-specific firmware coverage.; Prioritize replacement for unsupported affected devices that cannot receive firmware updates..

Prepared

Jun 7, 2026, 14:03 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.