CVE-2015-9200: In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon W...

Security readout for executives and security teams

CVE-2015-9200 affects older Android devices using specified Qualcomm Snapdragon Mobile and Wear chips. The issue is in TrustZone-related API handling, where trusted code could dereference untrusted pointers. The known fix boundary is Android security patch level 2018-04-05 or later. Business risk is mainly unmanaged, unsupported, or legacy mobile and wearable devices. Exposure is likely limited to Android or Snapdragon Wear devices using the named Qualcomm chipsets and running a security patch level before 2018-04-05. Asset teams must map device models to chipsets because the sources list chip families, not all affected commercial device names. Prioritize as a legacy mobile exposure issue. It deserves attention where old Android devices handle sensitive data, access corporate systems, or remain in production. Without active exploitation or severity data, urgency should be driven by device criticality and patch availability. Mitigation focus: Verify devices have Android security patch level 2018-04-05 or later.; Apply OEM firmware and Android security updates where available.; Identify devices using the listed Qualcomm Snapdragon chipsets..

Prepared

Jun 7, 2026, 14:03 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.