CVE-2014-9883: Integer overflow in drivers/char/diag/diag_dci.c in the Qualcomm components in Android before 2016-08-05 on...

Security readout for executives and security teams

CVE-2014-9883 is an Android Qualcomm component flaw affecting Nexus 5 and Nexus 7 (2013) devices before the 2016-08-05 Android security update. A malicious app could potentially gain extra privileges or access sensitive information. The source bundle does not provide CVSS scoring or evidence of active exploitation. Exposure is most likely limited to legacy Android deployments using affected Qualcomm components, specifically Nexus 5 and Nexus 7 (2013) devices running builds before the 2016-08-05 security patch level. Prioritize remediation if the organization still operates legacy Nexus or Qualcomm-based Android devices. For modern managed fleets, urgency is lower but inventory validation is still warranted because unsupported mobile devices can preserve old kernel vulnerabilities indefinitely. Mitigation focus: Update affected devices to the 2016-08-05 Android security patch level or later.; Retire Nexus 5 or Nexus 7 (2013) devices that cannot receive vendor fixes.; Check OEM or Android bulletin guidance for affected Qualcomm-based builds..

Prepared

Jun 13, 2026, 14:00 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.