Insecure Cryptographic Algorithm in Qualcomm GPS Client for Android
CVE-2014-9969
What is CVE-2014-9969?
The vulnerability arises from the Qualcomm GPS client embedded in Android devices, where it employs an insecure cryptographic algorithm which can compromise GPS data integrity. This flaw affects all Qualcomm products running Android versions from CAF that utilize the Linux kernel, exposing users to potential security threats. By leveraging this vulnerability, an attacker could manipulate GPS signals, leading to unauthorized tracking or denial of service. This highlights the critical need for manufacturers to prioritize secure coding practices and implement stronger cryptographic measures in their products.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.
Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.
Affected Version(s)
All Qualcomm products All Android releases from CAF using the Linux kernel
References
CVSS V3.1
Timeline
Vulnerability published
Vulnerability Reserved