CVE-2014-7952

The backup mechanism in the adb tool in Android might allow attackers to inject additional applications (APKs) and execute arbitrary code by leveraging failure to filter application data streams.

CVSS v3.0

7.8 HIGHCVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CVSS v2.0

4.6 MEDIUMAV:L/AC:L/Au:N/C:P/I:P/A:P

EPSS

0.40% chance of exploitation in the next 30 days, 34th percentile

Published

2018-01-12

Updated

2024-08-06

Proof-of-concept exploits (3)

• http://packetstormsecurity.com/files/132645/ADB-Backup-APK-Injection.html
• http://seclists.org/fulldisclosure/2015/Jul/46
• irsl/ADB-Backup-APK-Injection/

References

• CVE Record
• NVD entry

Related

• CVE-2014-8757
• CVE-2017-7525
• CVE-2017-9732
• CVE-2019-10181
• CVE-2019-10182
• CVE-2019-10185