CVE-2014-9786: Heap-based buffer overflow in drivers/media/platform/msm/camera_v2/sensor/actuator/msm_actuator.c in the Qu...

Security readout for executives and security teams

CVE-2014-9786 is an Android kernel-level memory corruption issue in Qualcomm camera actuator code on Nexus 5 and Nexus 7 (2013). A malicious local application could gain higher privileges on devices running Android builds before the 2016-07-05 security patch level. Exposure is most likely limited to legacy Nexus 5 and Nexus 7 (2013) devices that remain in use without the July 2016 Android security update. Treat this as a legacy device risk. It is not supported by evidence of active exploitation here, but unpatched affected devices can expose privileged kernel components to malicious apps. Mitigation focus: Patch affected devices to Android security patch level 2016-07-05 or later where available.; Retire or isolate Nexus 5 and Nexus 7 (2013) devices that cannot be patched.; Restrict installation of untrusted applications on any remaining legacy Android devices..

Prepared

Jun 13, 2026, 14:22 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.