CVE-2014-9991: In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon W...

Security readout for executives and security teams

This flaw affects older Android devices using listed Qualcomm Snapdragon Mobile or Wear chipsets. A malformed or oversized USB mass storage transfer can cause a buffer overflow. For executives, urgency depends on whether affected legacy devices remain in use and whether they can connect to untrusted USB hosts or peripherals. Exposure is most likely in older Android phones, embedded devices, or wearables using the listed Qualcomm chipsets and running patch levels before 2018-04-05. Internet-only assets are not the primary concern based on the USB mass storage trigger described. Treat this as a legacy-device exposure review, not an internet emergency based on current evidence. Prioritize inventories with Android patch levels before 2018-04-05, especially operational devices that still use USB connectivity. Mitigation focus: Apply OEM firmware with Android security patch level 2018-04-05 or later.; Identify devices using the listed Qualcomm Snapdragon chipsets.; Retire or isolate devices that cannot receive vendor security updates..

Prepared

Jun 7, 2026, 14:03 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.