CVE-2015-9156: In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon W...

Security readout for executives and security teams

This issue affects older Android devices using specific Qualcomm Snapdragon Mobile or Wear chipsets. Under a particular cellular data-call condition, a buffer overflow may occur. The public sources do not state the resulting impact, severity score, or active exploitation, so urgency depends on whether affected legacy devices remain in use. Exposure is most likely in legacy Android phones, embedded Android devices, or wearables using the listed Qualcomm chipsets and lacking the April 5, 2018 Android security patch level or equivalent OEM update. Treat this as a legacy-device risk management item. It is not supported by public active-exploitation evidence here, but affected unpatched devices may remain in fleets, kiosks, wearables, or embedded deployments. Mitigation focus: Check OEM or carrier firmware guidance for the affected device models.; Update affected Android devices to the 2018-04-05 security patch level or later if available.; Retire or isolate unsupported devices that cannot receive relevant firmware updates..

Prepared

Jun 7, 2026, 14:03 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.