CVE-2014-9993: In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile, Snapdragon...

Security readout for executives and security teams

This issue affects Android devices using listed Qualcomm Snapdragon chipsets below the 2018-04-05 security patch level. A large provisioning message may trigger a buffer overread, meaning software reads beyond intended memory. Public sources do not provide CVSS, impact detail, exploitability, or active exploitation evidence. Exposure is most likely in legacy Android, automotive, wearable, or embedded fleets using the listed Qualcomm platforms and running pre-2018-04-05 patch levels. Modern managed devices with current Android security patches are less likely to be exposed based on the source description. Prioritize discovery over emergency response. The vulnerability is old and lacks public severity or exploitation evidence, but unpatched legacy Android and embedded Qualcomm devices can persist for years. Focus on identifying unsupported assets and closing patch gaps. Mitigation focus: Inventory Android devices using the listed Qualcomm Snapdragon platforms.; Update affected devices to Android security patch level 2018-04-05 or later.; Check OEM and Qualcomm guidance for device-specific firmware availability..

Prepared

Jun 7, 2026, 14:03 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.