CVE-2014-9802: Multiple integer overflows in lib/libfdt/fdt.c in the Qualcomm components in Android before 2016-07-05 on N...

Security readout for executives and security teams

This is an older Android privilege-escalation issue in Qualcomm components on Nexus 5 and Nexus 7 (2013) devices. A malicious app could exploit integer overflows to gain higher privileges. The source bundle does not show internet-facing exposure, active exploitation, or broader affected products. Exposure appears limited to legacy Nexus 5 and Nexus 7 (2013) devices running Android builds before 2016-07-05. The bundle does not support assuming other Qualcomm Android devices are affected. Treat this as a legacy mobile hygiene issue. It is not shown as actively exploited, but affected devices are old and should be patched or removed from business use because compromise could raise attacker privileges locally. Mitigation focus: Update affected devices to Android security patch level 2016-07-05 or later.; Retire Nexus 5 and Nexus 7 (2013) devices that cannot be patched.; Restrict installation of untrusted or sideloaded applications on legacy Android devices..

Prepared

Jun 13, 2026, 14:22 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.