CVE-2014-9897: sound/soc/msm/qdsp6v2/msm-lsm-client.c in the Qualcomm components in Android before 2016-08-05 on Nexus 5 d...

Security readout for executives and security teams

CVE-2014-9897 is an Android Qualcomm component flaw reported for Nexus 5 devices before the 2016-08-05 Android security level. A malicious app could use improperly validated user-space data to obtain sensitive information. The provided sources do not show active exploitation, CVSS severity, or broad product impact beyond the stated Nexus 5 scope. Known exposure is legacy Nexus 5 devices running Android before 2016-08-05. The bundle does not establish affected status for other devices, Android versions, or Qualcomm-based products, so those should be validated against vendor advisories and source lineage. Prioritize if the organization still operates Nexus 5 or similarly old Android assets. For most modern fleets, urgency is mainly legacy-device cleanup, because evidence is narrow and no active exploitation is cited. Mitigation focus: Update Nexus 5 devices to the Android 2016-08-05 security level or later where available.; Remove or isolate devices that cannot receive the relevant Android security update.; Check vendor guidance for any downstream Qualcomm Android builds using this component..

Prepared

Jun 13, 2026, 14:00 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.