CVE-2014-9889: drivers/media/platform/msm/camera_v2/pproc/cpp/msm_cpp.c in the Qualcomm components in Android before 2016-...

Security readout for executives and security teams

This is an old Android privilege-escalation issue in a Qualcomm camera component on Nexus 5 devices. A malicious app could use malformed camera frame messages to gain higher privileges. The business risk is mainly legacy or unmanaged devices running Android builds older than the August 5, 2016 patch level. Exposure appears limited to Nexus 5 devices with Qualcomm Android components before the 2016-08-05 Android security patch level. The provided affected-product metadata is incomplete, so broader Qualcomm or Android exposure should not be assumed from this bundle alone. Prioritize remediation if legacy Nexus 5 devices remain in use, especially in managed enterprise fleets. For modern supported Android estates, urgency is lower unless similar unpatched legacy builds are present. Mitigation focus: Update affected Nexus 5 devices to the 2016-08-05 Android patch level or later.; Remove or retire devices that cannot receive the relevant Android security update.; Restrict installation of untrusted applications on any remaining legacy devices..

Prepared

Jun 13, 2026, 14:00 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.