CVE-2014-9873: Integer underflow in drivers/char/diag/diag_dci.c in the Qualcomm components in Android before 2016-08-05 o...

Security readout for executives and security teams

This is an old Android kernel component flaw affecting Nexus 5 and Nexus 7 (2013) devices before the August 5, 2016 Android security level. A malicious app could potentially gain higher privileges or read sensitive information. Evidence is limited to the CVE record, Android bulletin reference, and Qualcomm commit reference. Exposure is most likely limited to legacy Nexus 5 or Nexus 7 (2013) devices below the 2016-08-05 Android patch level. The sources do not prove broader Qualcomm device exposure. Treat this as a legacy-device risk. It is not KEV-listed in the bundle, but affected devices are old and should not remain in production without compensating controls. Mitigation focus: Identify any Nexus 5 or Nexus 7 (2013) devices still in use.; Verify devices are at or above the 2016-08-05 Android security patch level.; Retire unsupported affected devices that cannot receive the relevant Android update..

Prepared

Jun 13, 2026, 14:00 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.