CVE-2015-9150: In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile MDM9625, MDM9635...

Security readout for executives and security teams

This is an old Android/Qualcomm memory-corruption flaw. On affected Snapdragon Mobile platforms, malformed or abnormal diagnostic event sizing could cause an integer overflow that later becomes a buffer overflow. Business risk is mainly legacy Android devices that never received the April 5, 2018 Android security patch level or equivalent OEM firmware. Exposure is most likely in unmanaged or unsupported Android devices using the listed Qualcomm chipsets with a security patch level before 2018-04-05. Current devices with later OEM security updates are less likely exposed, but device-specific confirmation is required. Prioritize as an asset hygiene issue for legacy Android fleets. Urgency rises if the organization still operates affected Qualcomm-based devices without the April 2018 patch level. There is no source-backed evidence of active exploitation in the supplied bundle. Mitigation focus: Inventory Android devices and record security patch level and chipset.; Update affected devices to 2018-04-05 security patch level or later.; Check OEM and Qualcomm guidance for device-specific firmware availability..

Prepared

Jun 7, 2026, 14:03 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.