CVE-2014-9990: In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon W...

Security readout for executives and security teams

CVE-2014-9990 is a Qualcomm Snapdragon issue affecting Android devices with security patch levels before 2018-04-05. The flaw is described as insufficient input validation that may cause out-of-bounds array access. Public sources do not provide severity scoring, exploit details, or business impact specifics. Likely exposure is limited to Android devices using the listed Qualcomm Snapdragon Mobile or Snapdragon Wear chipsets that have not received the 2018-04-05 Android security patch level or later. Set priority after fleet validation. The issue is old, but unmanaged legacy Android devices may remain exposed if they missed the April 2018 security update. Mitigation focus: Update affected Android devices to the 2018-04-05 security patch level or later.; Check OEM and Android security bulletin guidance for device-specific fixes.; Retire or replace unsupported devices that cannot receive relevant security updates..

Prepared

Jun 7, 2026, 14:03 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.