CVE-2015-9192: In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile, Snapdragon...

Security readout for executives and security teams

This flaw affects older Android devices using listed Qualcomm Snapdragon automobile, mobile, and wear chipsets. The available sources say malformed incoming messages to a content protection component can cause out-of-bounds memory access. Public details do not state a business impact, CVSS score, or active exploitation. Exposure is most likely in legacy Android automobile, mobile, or wear devices using the listed Snapdragon chipsets and running Android security patch levels before 2018-04-05. Modern, supported devices patched at or beyond that level are less likely exposed based on the bundle. Treat this as a legacy Android exposure-management issue. It is not supported by the bundle as an active exploitation emergency, but unsupported devices below the April 2018 patch level should be prioritized for update, isolation, or replacement. Mitigation focus: Update affected Android devices to the 2018-04-05 security patch level or later.; Check OEM and Qualcomm guidance for device-specific firmware availability.; Retire or isolate unsupported devices that cannot receive security updates..

Prepared

Jun 7, 2026, 14:03 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.