CVE-2014-9894: drivers/misc/qseecom.c in the Qualcomm components in Android before 2016-08-05 on Nexus 7 (2013) devices do...

Security readout for executives and security teams

This flaw affected Qualcomm components in Android on Nexus 7 (2013) devices before the 2016-08-05 security level. A malicious app could exploit improper string termination in a kernel driver to obtain sensitive information. The source bundle does not provide CVSS, confirmed exploit activity, or broad affected-product detail. Exposure appears limited to Nexus 7 (2013) devices running Android builds before 2016-08-05 with the vulnerable Qualcomm component. The bundle does not identify other products, versions, or CPEs. Prioritize only if Nexus 7 (2013) or related legacy Android test devices remain in use. Business urgency is lower than remotely exploitable server issues, but unsupported mobile devices can still leak sensitive data. Mitigation focus: Apply vendor-supported Android updates at or after the 2016-08-05 security level.; Retire or isolate unsupported Nexus 7 (2013) devices.; Restrict installation of untrusted apps on potentially affected devices..

Prepared

Jun 13, 2026, 14:00 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.