CVE-2014-9890: Off-by-one error in drivers/media/platform/msm/camera_v2/sensor/cci/msm_cci.c in the Qualcomm components in...

Security readout for executives and security teams

CVE-2014-9890 is a privilege-escalation flaw in Qualcomm camera-related Android kernel components on Nexus 5 and Nexus 7 (2013) devices before the 2016-08-05 Android patch level. A malicious app could abuse an I2C command path to gain higher privileges. Exposure appears limited to Nexus 5 and Nexus 7 (2013) devices running Android builds before 2016-08-05 with the affected Qualcomm camera CCI driver component. Prioritize remediation if legacy Nexus devices remain in production, testing, kiosks, or sensitive environments. The issue is old, but privilege escalation on unsupported Android devices remains operationally relevant. Mitigation focus: Update affected devices to Android security patch level 2016-08-05 or later, where supported.; Retire or isolate Nexus 5 and Nexus 7 (2013) devices that cannot receive the fix.; Restrict installation of untrusted applications on any remaining affected devices..

Prepared

Jun 13, 2026, 14:00 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.