CVE-2014-9929: In WCDMA in all Android releases from CAF using the Linux kernel, a Use of Out-of-range Pointer Offset vuln...

Security readout for executives and security teams

This CVE describes a possible memory-handling flaw in the WCDMA portion of Android releases from CAF using the Linux kernel. The public record is sparse: it does not state impact, severity, or affected device models. Treat it as a legacy Qualcomm/Android platform exposure requiring inventory and patch verification. Exposure is most likely in Android devices or firmware derived from Qualcomm CAF Linux kernel releases that include the affected WCDMA code. The affected statement is broad and does not identify specific chipsets, OEM devices, Android versions, or kernel branches. Handle as a legacy platform hygiene issue unless your environment still runs old or unsupported Qualcomm-based Android devices. Business urgency rises when devices cannot prove receipt of the 2017 Android/Qualcomm security updates. Mitigation focus: Check Android May 1, 2017 and Qualcomm/OEM guidance for CVE-2014-9929.; Apply vendor firmware updates that include the relevant CAF kernel security fix.; Prioritize unsupported Android devices for replacement or isolation..

Prepared

Jun 13, 2026, 04:43 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.