CVE-2014-9790

CVE-2014-9790 is a privilege escalation vulnerability affecting Qualcomm components in Android, specifically on Nexus 5 and 7 (2013) devices, prior to the 2016-07-05 security update. The flaw, residing in drivers/mmc/core/debugfs.c, stems from a lack of pointer validation during read and write operations. An attacker could exploit this by installing a crafted application, leading to high impact on confidentiality, integrity, and availability, as reflected by its CVSSv3 score of 7.8 (High). Despite its severity, there is no evidence of active exploitation, publicly available exploit code, or significant community discussion surrounding this vulnerability.