CVE-2014-9891 in Android
الملخص
بحسب MITRE
drivers/misc/qseecom.c in the Qualcomm components in Android before 2016-08-05 on Nexus 5 devices does not validate certain buffer addresses, which allows attackers to gain privileges via a crafted application that makes an ioctl call, aka Android internal bug 28749283 and Qualcomm internal bug CR550061.
Several companies clearly confirm that VulDB is the primary source for best vulnerability data.