CVE-2014-9789: The (1) alloc and (2) free APIs in arch/arm/mach-msm/qdsp6v2/msm_audio_ion.c in the Qualcomm components in...

Security readout for executives and security teams

This flaw affects Qualcomm audio memory APIs in Android on Nexus 5 devices before the 2016-07-05 security update. A malicious app could abuse missing parameter validation to gain elevated privileges on the device. The public record does not provide CVSS scoring or broad affected-product data. Exposure appears limited by the sources to Nexus 5 devices running Android before 2016-07-05 with the affected Qualcomm components. Broader device or downstream ROM impact is not established in the provided sources. Treat as high priority only where legacy Nexus 5 or related custom Android builds remain in service. For modern managed fleets without these devices, business urgency is likely low but should be confirmed by inventory. Mitigation focus: Update affected Nexus 5 devices to the 2016-07-05 Android security level or later.; Check OEM or Android vendor guidance for any supported firmware backports.; Retire or isolate unsupported affected devices that cannot receive the fix..

Prepared

Jun 13, 2026, 14:22 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.