High severity7.8NVD Advisory· Published Jul 11, 2016· Updated Jun 17, 2026

CVE-2014-9778

Description

The vid_dec_set_h264_mv_buffers function in drivers/video/msm/vidc/common/dec/vdec.c in the Qualcomm components in Android before 2016-07-05 on Nexus 5 and 7 (2013) devices does not validate the number of buffers, which allows attackers to gain privileges via a crafted application, aka Android internal bug 28598515 and Qualcomm internal bug CR563694.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Google/Android
cpe:2.3:o:google:android:*:*:*:*:*:*:*:*
Range: <=6.0.1

Patches

Vulnerability mechanics

References

source.android.com/security/bulletin/2016-07-01.htmlnvdVendor Advisory
www.securityfocus.com/bid/91628nvd
source.codeaurora.org/quic/la/kernel/msm/commit/nvd

News mentions

No linked articles in our index yet.

cvss	0.507
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000