CVE-2018-3593: In Android before security patch level 2018-04-05 on Qualcomm Snapdragon Automobile, Snapdragon Mobile, and...

Security readout for executives and security teams

CVE-2018-3593 affects older Android devices using specific Qualcomm Snapdragon chipsets. The public record says repeated eMBMS enable and disable requests can cause a double free memory condition. The sources do not provide a CVSS score, detailed impact, or evidence of active exploitation. Exposure is most likely in legacy Android, wearable, automotive, or embedded fleets using the listed Qualcomm chipsets and running Android security patch levels before 2018-04-05. Unsupported devices are the main concern. Treat this as a legacy fleet hygiene issue unless affected devices support sensitive operations or cannot be patched. The business risk is uncertain because public sources omit severity and impact details, but old unpatched Qualcomm Android devices should not remain unmanaged. Mitigation focus: Upgrade affected devices to Android security patch level 2018-04-05 or later.; Apply OEM, carrier, or Qualcomm firmware updates that include the April 2018 Android fixes.; Prioritize unsupported devices for retirement or isolation from sensitive networks..

Prepared

Jun 7, 2026, 14:03 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.