CVE-2014-9902: Buffer overflow in CORE/SYS/legacy/src/utils/src/dot11f.c in the Qualcomm Wi-Fi driver in Android before 20...

Security readout for executives and security teams

This flaw affects the Qualcomm Wi-Fi driver on Nexus 7 (2013) devices running Android before the 2016-08-05 security update. A nearby attacker could use malicious Wi-Fi management traffic to trigger a buffer overflow and potentially run code on the device. The sources do not show active exploitation. Exposure appears limited to Nexus 7 (2013) devices with Android security patch levels before 2016-08-05. The provided data does not identify other Android models, CPEs, or supported product versions. Prioritize remediation only where legacy Nexus 7 (2013) devices remain in use. The business risk is high for those devices because the flaw can permit remote code execution, but the likely fleet exposure is narrow and dated. Mitigation focus: Update affected devices to Android security patch level 2016-08-05 or later.; Retire or isolate Nexus 7 (2013) devices that cannot receive vendor security updates.; Check Android and Qualcomm guidance before applying compensating controls..

Prepared

Jun 13, 2026, 14:00 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.