p PatchFirst

CVE-2014-1909

CVE-2014-1909

This page contains facts from public vulnerability sources. Check the original advisory before updating.

Integer signedness error in system/core/adb/adb_client.c in Android Debug Bridge (ADB) for Android 4.4 in the Android SDK Platform Tools 18.0.1 allows ADB servers to execute arbitrary code via a negative length value, which bypasses a signed comparison and triggers a stack-based buffer overflow.

EPSS 2.1% · Fix available

Published
Updated

Stack: system

Affected products and versions

  • n/a

    Versions
    • n/a: Affected

    No fix published

  • android-platform-system-core Debian:11

    Affected ranges
    • ECOSYSTEM: < 1:6.0.0+r26-1~stage1

    Update to 1:6.0.0+r26-1~stage1

Original sources

Check your server →