CVE-2015-9171: In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile, Snapdragon...

Security readout for executives and security teams

This CVE affects certain Android devices using Qualcomm Snapdragon chips before the 2018-04-05 security patch level. The issue is a buffer over-read in Qualcomm OEMCrypto handling. Available sources do not provide a CVSS score, confirmed exploitation, or detailed business impact, so urgency depends on whether old unpatched devices remain in use. Exposure is most likely in Android, automotive, mobile, or wearable devices using the listed Qualcomm Snapdragon platforms with a security patch level before 2018-04-05. Modern devices patched after that date are less likely exposed, but OEM firmware status must be verified per device. Handle this as legacy device risk management. There is no cited active exploitation, but any pre-April 2018 Android security patch device on affected Snapdragon hardware is far behind support expectations and should be updated, isolated, or retired based on business criticality. Mitigation focus: Update affected Android devices to the 2018-04-05 security patch level or later.; Check OEM firmware guidance for listed Qualcomm Snapdragon platforms.; Retire or isolate devices that cannot receive vendor security updates..

Prepared

Jun 7, 2026, 14:03 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.