CVE-2014-9864 | Vulnetix

CVE-2014-9864 PUBLISHED

Reported by google_android · Published August 6, 2016

drivers/misc/qseecom.c in the Qualcomm components in Android before 2016-08-05 on Nexus 5 and 7 (2013) devices does not validate ioctl calls, which allows attackers to gain privileges via a crafted application, aka Android internal bug 28747998 and Qualcomm internal bug CR561841.

Fixed versions

Upgrade to a fixed version or later. Language registries are listed first, then Linux distributions, then vendor products.

Package	Ecosystem	Fixed in
android	google	6.0.1

Affected products

Vendor	Product	Versions
n/a	n/a	n/a
n/a	n/a	*

Timeline

Aug 1, 2016 CVE Published
Feb 4, 2022 EPSS Score (30 in total, the first dated here)
Apr 5, 2026 Security Advisory
Oct 17, 2026 Coalition ESS Score

Query this with the API

The same record, from the CLI:

vulnetix vdb vuln CVE-2014-9864
vulnetix vdb fixes CVE-2014-9864

Or with curl, using the org id and key from your account page:

curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
  "https://api.vdb.vulnetix.com/v2/vuln/CVE-2014-9864/fixes/registry"

The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart

References

x_refsource_CONFIRM
92219 vdb-entryx_refsource_BID
x_refsource_CONFIRM

Look up in the Resolve Platform →