CVE-2014-9882: Buffer overflow in drivers/media/radio/radio-iris.c in the Qualcomm components in Android before 2016-08-05...

Security readout for executives and security teams

CVE-2014-9882 is a buffer overflow in a Qualcomm radio driver used by Android on Nexus 7 (2013) devices before 2016-08-05. A malicious app could use it to gain higher privileges. Business risk mainly exists where legacy Nexus or related Qualcomm Android builds remain in use. Likely limited to legacy Android environments, specifically Nexus 7 (2013) devices before the 2016-08-05 Android security level, unless downstream Qualcomm builds reused the vulnerable code. Treat this as a legacy-device exposure issue. It is serious on affected devices because it can elevate app privileges, but urgency depends on whether old Nexus or Qualcomm Android devices remain in business use. Mitigation focus: Update affected devices to the 2016-08-05 Android security level or later if available.; Check Android and device vendor guidance for fixed builds before assuming coverage.; Retire or isolate unsupported Nexus 7 (2013) or legacy Qualcomm Android devices..

Prepared

Jun 13, 2026, 14:00 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.