CVE-2014-10059: In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile MDM9615, MDM9625...

Security readout for executives and security teams

This CVE describes an Android/Qualcomm access-control flaw in an ATCMD service. On affected Snapdragon Mobile platforms, third-party services could access the service without the user knowing. The provided sources do not include CVSS, impact detail, or confirmed exploitation. Exposure is most likely on older Android devices using the named Qualcomm Snapdragon Mobile platforms that have not reached the 2018-04-05 Android security patch level. Current managed fleets are mainly exposed through legacy, unsupported, or poorly inventoried devices. Prioritize this as a legacy Android fleet hygiene issue unless internal inventory shows affected unpatched devices in sensitive roles. The main business risk is hidden exposure on old mobile or embedded Android assets. Mitigation focus: Update affected Android devices to the 2018-04-05 security patch level or later.; Check OEM and Qualcomm guidance for device-specific availability and support status.; Retire or isolate devices that cannot receive the relevant Android security update..

Prepared

Jun 7, 2026, 14:03 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.