CVE-2014-9987: In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile, Snapdragon...

Security readout for executives and security teams

This vulnerability affects older Android builds on listed Qualcomm Snapdragon automobile, mobile, and wear platforms. The issue is a buffer over-read in a DRM API, which can expose data beyond an intended memory boundary. The source bundle does not provide CVSS, CWE, exploit status, or detailed impact, so urgency depends on whether affected devices remain below the April 5, 2018 Android security patch level. Exposure is most likely in unmanaged, embedded, automotive, wearable, or mobile Android devices using the listed Qualcomm chipsets and running a security patch level before 2018-04-05. Devices with OEM firmware that never received or applied the relevant Android security update may remain exposed. Prioritize this as an asset hygiene and legacy Android risk issue. It is not supported by current evidence of active exploitation, but affected devices below the 2018-04-05 patch level represent aged firmware risk and may be difficult to remediate quickly. Mitigation focus: Update affected Android devices to the 2018-04-05 security patch level or later.; Confirm OEM firmware includes the relevant Qualcomm Android security fixes.; Retire or isolate devices that cannot receive supported firmware updates..

Prepared

Jun 7, 2026, 14:03 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.