CVE-2014-9875: drivers/char/diag/diag_dci.c in the Qualcomm components in Android before 2016-08-05 on Nexus 7 (2013) devi...

Security readout for executives and security teams

This vulnerability affects Qualcomm diagnostic code in Android builds for Nexus 7 (2013) before the 2016-08-05 security update. A malicious app could gain higher privileges by sending malformed short DCI request packets. The business risk is mainly from unmanaged legacy Android devices. Exposure appears limited to Nexus 7 (2013) Android devices running Qualcomm components before the 2016-08-05 Android security update. The bundle does not substantiate other affected products. Treat this as a legacy mobile-device hygiene issue unless vulnerable Nexus 7 devices are still used. If such devices exist, prioritize patch verification or retirement because the flaw can allow privilege gain from a malicious app. Mitigation focus: Identify any Nexus 7 (2013) devices in use.; Verify devices are updated to the 2016-08-05 Android security level or later.; Retire or isolate devices that cannot be updated..

Prepared

Jun 13, 2026, 14:00 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.