CVE-2015-9220: In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon W...

Security readout for executives and security teams

This CVE affects certain Android devices using listed Qualcomm Snapdragon, IPQ, MDM, QCA, and SDX components before the 2018-04-05 Android security patch level. The flaw is an integer overflow tied to malformed firmware image section sizing. Business urgency depends on whether affected, still-supported devices remain below that patch level. Exposure is most plausible on Android devices with the listed Qualcomm chipsets that are on security patch levels before 2018-04-05, or earlier vendor builds lacking the Qualcomm fix. Treat this as an asset hygiene issue unless affected legacy Android devices remain in production. Prioritize identifying unpatched Qualcomm-based devices, especially unsupported mobile, wear, or embedded deployments. Mitigation focus: Update affected Android devices to security patch level 2018-04-05 or later.; Check OEM and Qualcomm guidance for device-specific firmware availability.; Retire or replace unsupported devices that cannot receive the relevant patch..

Prepared

Jun 7, 2026, 13:40 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.