CVE-2014-9954: An elevation of privilege vulnerability in Qualcomm closed source components.

Security readout for executives and security teams

This CVE concerns a privilege-escalation flaw in Qualcomm closed-source components used by Android kernel builds. The public bundle does not provide severity scoring, affected device models, or exploitation detail. Business urgency depends on whether managed Android devices still rely on vulnerable Qualcomm firmware/kernel components without the relevant Android security update history. Potential exposure is Android devices using Qualcomm components whose vendor or carrier update stream did not include the relevant Android security bulletin fixes. The supplied sources do not identify specific device models, chipset families, or Android releases beyond Android kernel. Prioritize this as an Android fleet hygiene issue unless your environment contains legacy Qualcomm-based devices. The absence of severity and exploit evidence lowers certainty, but unsupported mobile devices can create persistent privilege-escalation risk. Mitigation focus: Check Android and device-OEM guidance for CVE-2014-9954 or Android ID A-36388559.; Prioritize Android devices with Qualcomm components and stale security patch levels.; Apply vendor-approved Android security updates where available..

Prepared

Jun 7, 2026, 14:03 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.