CVE-2014-9976: In all Qualcomm products with Android releases from CAF using the Linux kernel, a buffer overflow vulnerabi...

Security readout for executives and security teams

CVE-2014-9976 is a Qualcomm Android kernel buffer overflow tied to 1x call processing. The public bundle names Snapdragon Mobile and Snapdragon Wear platforms, but does not provide CVSS, exploit status, or operational details. Business urgency depends on whether legacy Android devices with listed Qualcomm chipsets remain in use and whether OEM security updates were applied. Exposure is most likely in older Android phones, wearables, embedded mobile devices, or IoT deployments using the listed Qualcomm chipsets and CAF-derived Android kernel releases. Unsupported devices or custom vendor images may carry higher residual risk if they did not receive relevant Android or OEM security updates. Treat this as an inventory and legacy-device risk item, not an active-exploitation emergency based on the supplied evidence. Escalate if affected Qualcomm Android devices are still deployed without vendor security updates, especially in regulated, field, or mission-critical environments. Mitigation focus: Inventory Android devices and embedded products for the listed Qualcomm chipsets.; Check OEM firmware updates against the referenced Android security bulletins.; Prioritize patching or replacing unsupported devices that match affected platforms..

Prepared

Jun 12, 2026, 21:41 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.