CVE-2014-10057: In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile MDM9615, MDM9625...

Security readout for executives and security teams

CVE-2014-10057 is an Android/Qualcomm issue where certain audio calibration files were world-writable on affected Snapdragon-based devices. This is mainly a concern for legacy Android devices missing the April 2018 security patch level. Business risk depends on whether such devices remain in use and managed. Exposure is most likely on older Android phones, tablets, or embedded devices using the listed Qualcomm chipsets and running security patch levels before 2018-04-05. Treat this as a legacy-device hygiene issue. It is not supported by public active-exploitation evidence, but unpatched Android devices from this era can accumulate risk and should be updated, replaced, or restricted. Mitigation focus: Update affected devices to Android security patch level 2018-04-05 or later.; Check OEM or carrier firmware guidance for affected Qualcomm-based devices.; Retire or isolate devices that cannot receive the required security patch..

Prepared

Jun 7, 2026, 14:20 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.