CVE-2014-9966: In all Android releases from CAF using the Linux kernel, a Time-of-check Time-of-use (TOCTOU) Race Conditio...

Security readout for executives and security teams

CVE-2014-9966 is a race-condition flaw in Qualcomm CAF-based Android Linux kernel releases affecting Secure Display. The public record does not provide a CVSS score, practical impact details, or confirmed exploitation. Treat it as an exposure-management issue for Android devices or builds derived from Qualcomm CAF until vendor patch status is verified. Exposure is most likely where an organization uses Android devices, firmware, or custom builds based on Qualcomm CAF Linux kernel releases. The provided sources do not identify specific device models, OEM patch levels, or distribution timelines. Set priority after asset confirmation. This should not outrank actively exploited or scored critical issues on current evidence, but unmanaged Android CAF-based devices create uncertainty and should be resolved through vendor patch verification. Mitigation focus: Check Android June 2017 security bulletin guidance for applicable updates.; Request OEM or Qualcomm patch status for affected Android CAF-based builds.; Prioritize supported firmware or OS updates on exposed Android fleets..

Prepared

Jun 13, 2026, 04:43 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.