CVE-2015-9165: In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon W...

Security readout for executives and security teams

CVE-2015-9165 affects older Android devices using listed Qualcomm Snapdragon Mobile or Wear chipsets. The flaw is incorrect error handling in a Qualcomm trusted execution environment file service API that could cause a double free. Business urgency depends on whether legacy affected devices remain in use, because public severity and exploitability details are not provided. Exposure is most likely on legacy Android devices with the named Qualcomm chipsets that have not reached the 2018-04-05 Android security patch level. Modern managed devices patched beyond that level are less likely exposed, but OEM patch status must be verified per device model. Prioritize this as a legacy-device exposure review, not an emergency exploit response based on the available evidence. Organizations with unmanaged Android fleets, wearables, or long-lived embedded deployments should verify patch status and remove unsupported affected devices from sensitive use. Mitigation focus: Inventory Android devices using the listed Qualcomm Snapdragon chipsets.; Verify each device has Android security patch level 2018-04-05 or later.; Apply OEM or carrier firmware updates where available..

Prepared

Jun 7, 2026, 14:03 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.