CVE-2014-9874: Buffer overflow in the Qualcomm components in Android before 2016-08-05 on Nexus 5, 5X, 6P, and 7 (2013) de...

Security readout for executives and security teams

CVE-2014-9874 is an Android Qualcomm component buffer overflow affecting older Nexus 5, 5X, 6P, and Nexus 7 (2013) devices before the 2016-08-05 security patch level. A malicious app could use it to gain privileges on the device. Exposure is most likely limited to legacy Nexus devices running Android builds older than the 2016-08-05 patch level. The bundle does not establish exposure for other Android or Qualcomm-based devices. Treat this as high priority only where legacy affected Nexus devices remain active. For most modern fleets, urgency is mainly inventory confirmation and removal of unsupported devices. Mitigation focus: Update affected Nexus devices to the 2016-08-05 Android security patch level or later.; Remove or retire devices that cannot receive the required Android security update.; Restrict installation of untrusted applications on any legacy Android devices still in use..

Prepared

Jun 13, 2026, 14:00 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.