CVE-2015-9144: In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon W...

Security readout for executives and security teams

This is an old Qualcomm Snapdragon issue affecting Android devices that had not received the April 5, 2018 Android security patch level. The public record says a buffer overflow can occur while processing scheduling message information. Business urgency depends on whether any legacy Android or Snapdragon Wear devices remain in use without that patch level. Most likely exposure is unmanaged, unsupported, or embedded Android/Snapdragon Mobile or Snapdragon Wear devices running security patch levels before April 5, 2018. Exposure cannot be confirmed from chipset name alone; firmware build, OEM patch status, and device patch level matter. Treat this as a legacy-device exposure question, not a confirmed active incident. Prioritize inventory and remediation for unsupported Android or wearable devices still connected to business networks, especially where patch status is unknown or vendors no longer provide updates. Mitigation focus: Inventory Android and Snapdragon Wear devices still in production or field use.; Verify devices run Android security patch level 2018-04-05 or later.; Check OEM, Android, and Qualcomm guidance for model-specific firmware availability..

Prepared

Jun 7, 2026, 14:03 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.