CVE-2015-9203: In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile, Snapdragon...

Security readout for executives and security teams

This CVE affects older Android builds on listed Qualcomm Snapdragon Automobile, Mobile, and Wear chipsets. A missing input validation check in a PlayReady-related function could cause a buffer overread. The provided sources do not include CVSS, severity, active exploitation, or impact detail beyond the overread. Exposure is most likely in legacy Android devices, wearables, embedded systems, or automotive platforms using the listed Qualcomm chipsets and running security patch levels before 2018-04-05. Modern devices with later OEM security updates are less likely to remain exposed, but firmware lineage should be verified. Do not treat this as a current emergency based on the supplied evidence, but include it in legacy Android risk reduction. The main business risk is unpatched, long-lived Qualcomm-based devices outside normal mobile management, especially embedded, wearable, or automotive deployments. Mitigation focus: Update affected Android devices to security patch level 2018-04-05 or later where available.; Check OEM and Qualcomm guidance for firmware updates on listed Snapdragon platforms.; Retire or isolate devices that cannot receive applicable security updates..

Prepared

Jun 7, 2026, 14:03 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.