CVE-2014-9801: Multiple integer overflows in lib/libfdt/fdt_rw.c in the Qualcomm components in Android before 2016-07-05 o...

Security readout for executives and security teams

CVE-2014-9801 is an Android/Qualcomm issue reported for Nexus 5 devices before July 5, 2016. A malicious app could trigger integer overflow flaws in device-tree handling code and gain elevated privileges. The public bundle does not provide CVSS, CWE, or broad product coverage. Exposure appears limited by the bundle to Nexus 5 devices using affected Qualcomm Android components before 2016-07-05. The sources do not establish impact on other Android devices, Qualcomm chipsets, or downstream vendor builds. Prioritize remediation where legacy Nexus 5 devices remain in use, especially if users can install apps. Business urgency is lower for modern fleets with no Nexus 5 exposure, but unsupported Android devices should be removed from trusted environments. Mitigation focus: Confirm affected Nexus 5 devices are updated beyond the 2016-07-05 affected window.; Review the Android July 2016 security bulletin for vendor-specified remediation details.; Retire or isolate unsupported Nexus 5 devices that cannot receive the relevant update..

Prepared

Jun 13, 2026, 14:22 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.