CVE-2015-9140: In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile, Snapdragon Wear...

Security readout for executives and security teams

This vulnerability affects older Android devices using listed Qualcomm Snapdragon Mobile, Snapdragon Wear, and Small Cell chipsets. The issue could allow unauthorized memory access through an online memory dump feature. The public bundle does not provide a severity score, exploit evidence, or detailed attack requirements, so urgency depends on whether legacy affected devices remain in use. Exposure is most likely in legacy Android, Snapdragon Wear, or Small Cell deployments using the listed Qualcomm SoCs and security patch levels before 2018-04-05. Fully updated or retired devices are less likely to remain exposed, but OEM support status must be checked. Prioritize this as a legacy device exposure review rather than an emergency, unless affected unsupported devices protect sensitive environments. The absence of severity and exploitation data limits confidence, but unauthorized memory access on mobile or embedded platforms can carry meaningful confidentiality risk. Mitigation focus: Update affected Android devices to the 2018-04-05 security patch level or later.; Check OEM and Qualcomm guidance for device-specific firmware availability.; Retire or isolate unsupported affected devices that cannot receive vendor updates..

Prepared

Jun 7, 2026, 14:03 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.