CVE-2015-9181: In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile, Snapdragon...

Security readout for executives and security teams

This vulnerability affects Android devices using listed Qualcomm Snapdragon chipsets that have security patch levels before April 5, 2018. The issue is a buffer over-read in a crypto API function. Business risk depends heavily on device inventory, OEM patch availability, and whether affected devices remain in use. Exposure is most likely in older Android phones, wearables, or automotive/embedded devices using the listed Snapdragon SoCs and running patch levels earlier than April 5, 2018. Treat this as an inventory and lifecycle-management issue unless affected devices are still operational in sensitive environments. Unsupported Android or embedded devices on old patch levels should be prioritized for update, isolation, or replacement. Mitigation focus: Update affected Android devices to the April 5, 2018 security patch level or later.; Check OEM and Qualcomm guidance for device-specific firmware availability.; Retire or isolate unsupported devices that cannot receive security updates..

Prepared

Jun 7, 2026, 14:03 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.