CVE-2014-1909: Buffer Overflow
Integer signedness error in system/core/adb/adbclient.c in Android Debug Bridge (ADB) for Android 4.4 in the Android SDK Platform Tools 18.0.1 allows ADB servers to execute arbitrary code via a negative length value, which bypasses a signed comparison and triggers a stack-based buffer overflow.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2014-1909?
CVE-2014-1909 is classified as a high severity vulnerability due to its potential to allow arbitrary code execution.
How do I fix CVE-2014-1909?
To mitigate CVE-2014-1909, update the Android Debug Bridge (ADB) to a version that includes the security patch.
What systems are affected by CVE-2014-1909?
CVE-2014-1909 affects specific versions of Android SDK Platform Tools and openSUSE operating systems.
What type of vulnerability is CVE-2014-1909?
CVE-2014-1909 is an integer signedness error that leads to a stack-based buffer overflow.
Can CVE-2014-1909 be exploited remotely?
Yes, CVE-2014-1909 can be exploited remotely if the affected ADB service is exposed to the network.