CVE-2015-9191: In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon W...

Security readout for executives and security teams

This CVE affects older Android devices using listed Qualcomm Snapdragon Mobile or Wear chipsets. The issue is in Qualcomm's trusted execution environment syscall handling and involves unsafe use of an untrusted pointer. The source bundle does not provide CVSS, confirmed impact, or active exploitation evidence. Exposure is most likely in unmanaged, legacy, embedded, wearable, or Android fleet devices with affected Qualcomm chipsets and Android security patch levels before 2018-04-05. Current, supported devices patched at or after that level are less likely exposed based on the bundle. Prioritize discovery and remediation of legacy Android or wearable assets. Business urgency depends on whether affected, unpatched Qualcomm-based devices still handle sensitive workflows or network access. The public evidence is too limited to justify emergency escalation without confirmed exposure. Mitigation focus: Apply OEM Android updates with the 2018-04-05 security patch level or later.; Prioritize affected Qualcomm-based Android and Wear devices still in production use.; Replace or isolate devices that cannot receive the required security patch level..

Prepared

Jun 7, 2026, 14:03 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.