CVE-2014-9884: drivers/misc/qseecom.c in the Qualcomm components in Android before 2016-08-05 on Nexus 5 and 7 (2013) devi...

Security readout for executives and security teams

CVE-2014-9884 is a privilege-escalation flaw in Qualcomm Android components on Nexus 5 and Nexus 7 (2013) devices before the 2016-08-05 Android update. A malicious app could abuse missing pointer validation to gain higher privileges on the device. Exposure appears limited in the source bundle to Nexus 5 and Nexus 7 (2013) devices running Android builds before the 2016-08-05 security level. Broader Qualcomm impact is not established by the supplied data. Treat as high priority only where legacy Nexus 5 or Nexus 7 (2013) devices remain in service. The business risk is device compromise from a malicious app, but evidence of active exploitation is not supplied. Mitigation focus: Apply Android security updates dated 2016-08-05 or later where available.; Retire or isolate unsupported Nexus 5 and Nexus 7 (2013) devices.; Restrict sideloading and unmanaged app installation on legacy Android devices..

Prepared

Jun 13, 2026, 14:00 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.