CVE-2014-9864: drivers/misc/qseecom.c in the Qualcomm components in Android before 2016-08-05 on Nexus 5 and 7 (2013) devi...

Security readout for executives and security teams

This flaw affects Qualcomm Android components on Nexus 5 and Nexus 7 (2013) devices before the 2016-08-05 Android security update. A malicious app could abuse insufficient validation in the QSEECOM driver to gain elevated privileges. Business risk is concentrated in old or custom-maintained Android fleets. Exposure is most likely on Nexus 5 and Nexus 7 (2013) devices running Android builds before the 2016-08-05 security patch. The provided data does not prove broader product impact beyond the named Qualcomm Android components and devices. Prioritize if legacy Nexus devices still access corporate accounts, VPN, email, or regulated data. The vulnerability is old, but unsupported mobile endpoints can preserve old privilege-escalation paths indefinitely. Mitigation focus: Update affected devices to the 2016-08-05 Android security patch level or later.; Retire Nexus 5 or Nexus 7 (2013) devices that cannot receive supported security updates.; Check OEM, Android, and Qualcomm guidance before assuming custom ROMs are fixed..

Prepared

Jun 13, 2026, 14:00 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.