CVE-2014-9864

CVE-2014-9864 describes an input validation vulnerability in the Qualcomm qseecom.c driver within Android, specifically affecting Nexus 5 and 7 (2013) devices before the 2016-08-05 update. An attacker could exploit this flaw by crafting a malicious application to bypass ioctl call validation, leading to privilege escalation. Rated with a CVSS score of 7.8 (High), this vulnerability requires local access and user interaction (UI:R) but has low attack complexity (AC:L), potentially resulting in high confidentiality, integrity, and availability impacts. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.