CVE-2015-9143: In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon W...

Security readout for executives and security teams

This CVE describes a buffer overflow in Qualcomm Snapdragon-based Android devices before the 2018-04-05 security patch level. The risk is mainly to older or unsupported devices using the listed Snapdragon Mobile, Wear, modem, or IPQ chipsets. The source bundle does not provide a CVSS score or exploitation evidence. Exposure is most likely in legacy Android, wearable, modem, or embedded devices using the listed Qualcomm chipsets and running a security patch level earlier than 2018-04-05. Devices patched to 2018-04-05 or later are outside the described affected range. Prioritize this for environments with old Android, wearable, modem, or embedded Qualcomm-based devices. The business urgency is lower for fully patched fleets, but unsupported devices should be tracked because the issue affects early boot behavior and the sources do not quantify impact. Mitigation focus: Inventory Android and embedded devices using the listed Qualcomm chipsets.; Confirm each device has Android security patch level 2018-04-05 or later.; Check OEM, Android, and Qualcomm guidance for device-specific firmware updates..

Prepared

Jun 7, 2026, 14:03 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.