CVE-2014-9795: app/aboot/aboot.c in the Qualcomm components in Android before 2016-07-05 on Nexus 5 devices does not prope...

Security readout for executives and security teams

CVE-2014-9795 is a bootloader-level flaw reported for Nexus 5 devices using Qualcomm Android components before the 2016-07-05 Android security fixes. The issue is an integer overflow check failure that could let an attacker bypass intended access restrictions. The sources do not provide CVSS, broad affected-product data, or active exploitation evidence. Exposure appears limited by the provided sources to Nexus 5 devices running Android firmware before the 2016-07-05 security level. The bundle does not prove impact across other Qualcomm-based Android devices, so broader fleet exposure should not be assumed without vendor evidence. Treat this as a legacy-device risk. It is not supported by current active-exploitation evidence in the bundle, but bootloader access-control bypasses are sensitive. Prioritize confirmation that no Nexus 5 or similarly unsupported Android devices remain in business-critical use. Mitigation focus: Apply Android or OEM firmware including the 2016-07-05 security fixes.; Verify Nexus 5 devices are not running pre-2016-07-05 firmware.; Check OEM or vendor guidance before assuming fixes for non-Nexus devices..

Prepared

Jun 13, 2026, 14:22 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.