CVE-2014-10053: In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile, Snapdragon...

Security readout for executives and security teams

CVE-2014-10053 affects Android devices using listed Qualcomm Snapdragon platforms before the 2018-04-05 security patch level. The issue is improper validation of data access in the Widevine secure application. Business risk is mainly for old or unpatched Android phones, wearables, or automotive devices using affected Qualcomm chipsets. Exposure is likely limited to Android devices on the named Qualcomm chipsets that remain below the 2018-04-05 Android security patch level. Modern supported devices are less likely exposed if they received April 2018 or later vendor security updates. Treat this as a legacy-device hygiene issue. Prioritize environments with unmanaged Android fleets, embedded automotive systems, or wearables that may not receive updates. Replace or isolate devices stuck before the April 2018 patch level. Mitigation focus: Update affected Android devices to the 2018-04-05 security patch level or later.; Prioritize unsupported devices that cannot receive OEM security updates for replacement or isolation.; Check OEM and Qualcomm guidance for device-specific firmware availability..

Prepared

Jun 7, 2026, 14:17 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.