CVE-2014-9799: The makefile in the Qualcomm components in Android before 2016-07-05 on Nexus 5 and 7 (2013) devices omits...

Security readout for executives and security teams

This is an old Android privilege-escalation issue tied to Qualcomm components on Nexus 5 and Nexus 7 (2013) devices before the 2016-07-05 security level. A malicious app may have abused a compiler optimization mistake to gain higher privileges. Public metadata does not provide a CVSS score. Exposure appears limited to legacy Nexus 5 and Nexus 7 (2013) Android devices running builds before 2016-07-05. Organizations with unmanaged, unsupported, or lab Android devices are the most plausible exposure point. Low to moderate for most organizations because the issue is old and device-specific. Prioritize action if legacy Nexus devices are still used for operations, testing, kiosk, or privileged mobile workflows. Mitigation focus: Inventory Nexus 5 and Nexus 7 (2013) devices still in use.; Update affected devices to the 2016-07-05 Android security level or later where available.; Retire or isolate devices that cannot receive the relevant Android security update..

Prepared

Jun 13, 2026, 14:22 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.