CVE-2014-9880

CVE-2014-9880 is a privilege escalation vulnerability affecting Qualcomm components in Android on Nexus 7 (2013) devices, specifically within the venc.c driver. An attacker can exploit this by crafting a malicious application that abuses unvalidated VEN_IOCTL_GET_SEQUENCE_HDR ioctl calls. This vulnerability carries a CVSS v3 score of 7.8 (High), indicating that a local attacker can achieve high confidentiality, integrity, and availability impacts with low attack complexity, requiring user interaction. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion surrounding this CVE.