CVE-2015-9172: In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile, Snapdragon...

Security readout for executives and security teams

This vulnerability affects Android devices using listed Qualcomm Snapdragon Automobile, Mobile, or Wear platforms before the 2018-04-05 Android security patch level. The issue is a buffer over-read in a Widevine API function. Public sources do not provide impact details, CVSS, or evidence of exploitation, so urgency depends on affected device inventory and patch status. Likely exposure is Android-based phones, wearables, or automotive systems using the listed Qualcomm chipsets and running an Android security patch level earlier than 2018-04-05. Organizations without mobile, embedded Android, or fleet device inventory may underestimate exposure. Treat this as an inventory and patch-compliance issue unless newer evidence changes risk. The absence of CVSS and exploitation evidence lowers confidence in urgency, but vulnerable legacy Android devices can persist in mobile, wearable, and automotive fleets. Mitigation focus: Identify Android devices using the listed Qualcomm Snapdragon platforms.; Update affected devices to the 2018-04-05 Android security patch level or later.; Check OEM, carrier, Android, and Qualcomm guidance for device-specific fixes..

Prepared

Jun 7, 2026, 14:03 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.