CVE-2014-9777: The vid_dec_set_meta_buffers function in drivers/video/msm/vidc/common/dec/vdec.c in the Qualcomm component...

Security readout for executives and security teams

This is an old Android/Qualcomm media driver privilege-escalation flaw affecting Nexus 5 and Nexus 7 (2013) devices before the 2016-07-05 Android security update. A malicious app could abuse missing buffer-count validation to gain higher privileges on the device. Exposure appears limited to Nexus 5 and Nexus 7 (2013) devices running Android builds before the 2016-07-05 security level, based on the supplied CVE description. The bundle does not prove impact for other Qualcomm-based Android devices. Treat as a targeted legacy-device risk. It is important where old Nexus devices remain in use, but the supplied evidence does not support broad enterprise emergency action or active exploitation claims. Mitigation focus: Confirm affected Nexus devices are updated to Android security level 2016-07-05 or later.; Check Android and vendor guidance for fixed builds applicable to deployed devices.; Remove, replace, or isolate unsupported Nexus 5 and Nexus 7 (2013) devices..

Prepared

Jun 13, 2026, 14:22 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.