CVE-2014-9885: Format string vulnerability in drivers/thermal/qpnp-adc-tm.c in the Qualcomm components in Android before 2...

Security readout for executives and security teams

This is a privilege-escalation flaw in Android’s Qualcomm thermal driver on Nexus 5 devices. A malicious app could abuse unsafe formatting in a device name field to gain higher privileges. The sources do not show active exploitation or broad device impact beyond the named Nexus 5 context. Exposure is most likely limited to legacy Nexus 5 devices running Android builds before the 2016-08-05 security level. Enterprise risk depends on whether such devices still access corporate accounts, Wi-Fi, development systems, or test environments. Treat this as a legacy mobile-device hygiene issue unless Nexus 5 devices remain in use. If they do, prioritize update or retirement because app-based privilege escalation can undermine device trust and corporate access controls. Mitigation focus: Inventory Nexus 5 devices and confirm Android security patch level.; Update affected devices to vendor-supported builds at or after 2016-08-05.; Retire or isolate devices that cannot receive the relevant Android security update..

Prepared

Jun 13, 2026, 14:00 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.