CVE-2014-9863
HighSummary
There is an integer underflow in the diag driver in Qualcomm components in Android before 2016-08-05 on Nexus 5 and 7 (2013) devices. This allows attackers to gain privileges or obtain sensitive information via a crafted application.
Risk Assessment
The organization may be exposed to unauthorized data access and privilege escalation through malicious applications, potentially leading to serious security breaches.
Recommendation
It is recommended to update devices to the latest version of Android to mitigate this vulnerability and to monitor applications installed on these devices.
Other vulnerabilities in diag driver in Qualcomm components
Original NVD description (English source)
Integer underflow in the diag driver in the Qualcomm components in Android before 2016-08-05 on Nexus 5 and 7 (2013) devices allows attackers to gain privileges or obtain sensitive information via a crafted application, aka Android internal bug 28768146 and Qualcomm internal bug CR549470.

