CVE-2014-9865: drivers/misc/qseecom.c in the Qualcomm components in Android before 2016-08-05 on Nexus 5 and 7 (2013) devi...

Security readout for executives and security teams

This is a local Android privilege-escalation issue in Qualcomm QSEECom code on Nexus 5 and Nexus 7 (2013) devices before the 2016-08-05 Android security level. A malicious app could abuse insufficient user-space input restrictions to gain higher privileges. Risk is mainly for legacy devices still in use. Exposure appears limited to Nexus 5 and Nexus 7 (2013) devices running Android builds before 2016-08-05. The provided affected-product metadata is incomplete, so do not generalize beyond the named Nexus devices without vendor confirmation. Prioritize remediation only where legacy Nexus 5 or Nexus 7 (2013) devices still handle business data. For modern managed fleets, urgency is lower, but any remaining vulnerable devices should be removed or updated because the impact is privilege escalation. Mitigation focus: Apply the Android security update dated 2016-08-05 or later where available.; Retire or isolate unsupported Nexus 5 and Nexus 7 (2013) devices.; Restrict installation of untrusted or sideloaded Android applications..

Prepared

Jun 13, 2026, 14:00 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.