CVE-2014-9956: An elevation of privilege vulnerability in Qualcomm closed source components.

Security readout for executives and security teams

CVE-2014-9956 is a privilege escalation issue in Qualcomm closed source components used by the Android kernel. A successful attack could let code already running on a device gain higher privileges. The public record does not provide scoring, affected device models, or detailed fix mechanics. Exposure is most likely on Android devices using affected Qualcomm kernel components and missing the June 2017 Android security bulletin fixes. Specific OEM models and versions are not identified in the provided sources. Prioritize if the organization still uses older Qualcomm-based Android devices or unmanaged Android fleets. Business urgency is lower where devices are modern, patched, and centrally managed, but evidence is too limited for a precise risk score. Mitigation focus: Check OEM firmware guidance for CVE-2014-9956 or Android ID A-36389611.; Update affected Android devices to vendor firmware containing June 2017 Android security bulletin fixes.; Retire or isolate unsupported Qualcomm-based Android devices lacking vendor security updates..

Prepared

Jun 7, 2026, 14:03 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.