CVE-2014-9957: An elevation of privilege vulnerability in Qualcomm closed source components.

Security readout for executives and security teams

This CVE describes a privilege-escalation flaw in Qualcomm closed-source components used by Android kernel builds. The public record gives limited technical detail, no CVSS score, and no confirmed active exploitation. Business urgency depends on whether your Android fleet includes affected Qualcomm-based devices that lack the referenced Android security update. Exposure is most likely on Android devices using affected Qualcomm closed-source kernel components and missing the relevant June 2017 Android/OEM security fixes. The bundle does not identify specific device models, chipset families, or Android release versions beyond “Android kernel.” Set priority after fleet scoping. If affected Qualcomm-based Android devices remain unpatched or unsupported, treat this as a remediation backlog risk for mobile and embedded Android environments rather than an internet-wide emergency. Mitigation focus: Check Android and OEM guidance for CVE-2014-9957 patch availability.; Update affected Android devices to firmware including the June 2017 security fixes.; Prioritize Qualcomm-based devices with missing or unknown Android security patch levels..

Prepared

Jun 7, 2026, 14:03 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.