CVE-2014-9958: An elevation of privilege vulnerability in Qualcomm closed source components.

Security readout for executives and security teams

CVE-2014-9958 is a privilege-escalation issue in Qualcomm closed-source components used by the Android kernel. A successful attack could let code on an affected device gain higher privileges. The public record is sparse: no CVSS score, CWE, detailed affected device list, or public fix detail is provided in the source bundle. Exposure is most plausible on Android devices using the affected Qualcomm closed-source kernel components that did not receive the relevant Android security updates. The source bundle names Android kernel broadly, but does not identify specific device models, chipset families, or Android release versions. Treat this as a legacy mobile fleet hygiene issue unless unpatched affected Android devices remain in sensitive use. The business risk is unclear from public sources, but kernel privilege escalation can become serious when combined with other compromise paths. Mitigation focus: Review the Android June 2017 security bulletin and vendor advisories.; Confirm affected Android devices received relevant security patch levels.; Prioritize retired or unmanaged Qualcomm-based Android devices for review..

Prepared

Jun 7, 2026, 14:03 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.