CVE-2014-9887: drivers/misc/qseecom.c in the Qualcomm components in Android before 2016-08-05 on Nexus 5 and 7 (2013) devi...

Security readout for executives and security teams

This is an old Android Qualcomm driver flaw affecting Nexus 5 and Nexus 7 (2013) before the August 5, 2016 security update. A malicious app could exploit missing length validation to gain privileges. Business risk is mainly legacy or unmanaged devices still running unsupported firmware. Most exposure is legacy Android hardware: Nexus 5 and Nexus 7 (2013) devices before the 2016-08-05 Android security level. The supplied affected-product metadata is incomplete, so organizations should verify device models, patch levels, and vendor kernel lineage. Prioritize only if legacy Android devices remain in use. For modern patched fleets, urgency is low operationally; for unsupported devices handling corporate data, replacement or isolation is the cleanest risk reduction. Mitigation focus: Apply Android security updates at 2016-08-05 or later where available.; Retire or isolate unsupported Nexus 5 and Nexus 7 (2013) devices.; Check vendor firmware guidance for Qualcomm qseecom fixes..

Prepared

Jun 13, 2026, 14:00 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.