CVE-2014-9887

CVE-2014-9887 is a privilege escalation vulnerability in the Qualcomm qseecom.c driver within Android, specifically affecting Nexus 5 and 7 (2013) devices before the 2016-08-05 update. Attackers can exploit this by crafting a malicious application that leverages improper length validation. Rated 7.8 HIGH on CVSS, this vulnerability allows an unprivileged attacker to gain high-impact confidentiality, integrity, and availability by tricking a user into installing a malicious application. There is no known active exploitation, publicly available exploit code, or significant community discussion surrounding this CVE.