CVE-2014-9935: In TrustZone an integer overflow vulnerability leading to a buffer overflow could potentially occur in a DR...

Security readout for executives and security teams

CVE-2014-9935 is a Qualcomm TrustZone issue in Android CAF-based Linux kernel releases. A calculation error in a DRM routine could become a buffer overflow. The public bundle does not provide CVSS, impact detail, or confirmed exploitation, so business urgency depends on affected device inventory and patch status. Exposure is most likely in Qualcomm Android devices or firmware builds derived from CAF Linux kernel releases and lacking the relevant 2017 Android/OEM security updates. The bundle does not support extending this to non-Android, non-CAF, or non-Qualcomm environments. Treat this as an inventory-and-patching risk, not an emergency exploitation event based on current evidence. Prioritize regulated, high-value, or long-lived Android device fleets where firmware updates may lag or be unavailable. Mitigation focus: Identify Qualcomm Android devices and CAF-derived firmware in scope.; Apply OEM or Android security updates referencing CVE-2014-9935.; Prioritize unsupported devices for replacement or compensating controls..

Prepared

Jun 13, 2026, 05:01 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.