CVE-2015-9166: In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile, Snapdragon...

Security readout for executives and security teams

This CVE affects older Android devices using listed Qualcomm Snapdragon platforms. A DRM provisioning safeguard in Qualcomm’s secure execution environment could be bypassed because provisioning was allowed without sufficient checks. The public bundle does not describe practical impact, exploitability, or business consequences beyond the affected patch level. Exposure is most likely in legacy Android devices or embedded products using the listed Qualcomm chipsets and running security patch levels before 2018-04-05. Modern, vendor-supported devices with later Android security patches are less likely exposed, but OEM firmware status must be verified. Treat this as a legacy-device hygiene issue unless affected devices still handle sensitive protected content or remain unsupported. Prioritize inventory and patch verification over emergency response because exploitation evidence and severity details are incomplete. Mitigation focus: Apply OEM Android security updates dated 2018-04-05 or later where available.; Confirm Qualcomm or device-vendor firmware guidance for each affected model.; Retire or isolate unsupported devices that cannot receive security updates..

Prepared

Jun 7, 2026, 14:03 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.