CVE-2014-1909
Integer signedness error in system/core/adb/adb_client.c in Android Debug Bridge (ADB) for...
CVE-2014-1909 is a high vulnerability (CVSS 7.5) in Google Android Debug Bridge, published May 14, 2014. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.06%, the 81st percentile. Fixed in android-platform-system-core 1:6.0.0+r26-1~stage1.
Integer signedness error in system/core/adb/adb_client.c in Android Debug Bridge (ADB) for Android 4.4 in the Android SDK Platform Tools 18.0.1 allows ADB servers to execute arbitrary code via a negative length value, which bypasses a signed comparison and triggers a stack-based buffer overflow.
Exploit likelihood
What each source reports
NVD Score used
Integer signedness error in system/core/adb/adb_client.c in Android Debug Bridge (ADB) for Android 4.4 in the Android SDK Platform Tools 18.0.1 allows ADB servers to execute arbitrary code via a negative length value, which bypasses a signed comparison and triggers a stack-based buffer overflow.
- Record
CVE-2014-1909- CVSS 2.0
- 7.5 High
AV:N/AC:L/Au:N/C:P/I:P/A:P - Weakness
- CWE-189
- Updated
- 2026-11-02
CVE List No score
Integer signedness error in system/core/adb/adb_client.c in Android Debug Bridge (ADB) for Android 4.4 in the Android SDK Platform Tools 18.0.1 allows ADB servers to execute arbitrary code via a negative length value, which bypasses a signed comparison and triggers a stack-based buffer overflow.
- Record
CVE-2014-1909- Updated
- 2026-11-02
EUVDEUVD-2014-1970 No score
Integer signedness error in system/core/adb/adb_client.c in Android Debug Bridge (ADB) for Android 4.4 in the Android SDK Platform Tools 18.0.1 allows ADB servers to execute arbitrary code via a negative length value, which bypasses a signed comparison and triggers a stack-based buffer overflow.
- Record
EUVD-2014-1970- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-58c5-6h84-hwh5 No score
Integer signedness error in system/core/adb/adb_client.c in Android Debug Bridge (ADB) for...
Integer signedness error in system/core/adb/adb_client.c in Android Debug Bridge (ADB) for Android 4.4 in the Android SDK Platform Tools 18.0.1 allows ADB servers to execute arbitrary code via a negative length value, which bypasses a signed comparison and triggers a stack-based buffer overflow.
- Record
GHSA-58c5-6h84-hwh5- Updated
- 2026-11-02
OSV No score
Integer signedness error in system/core/adb/adb_client.c in Android Debug Bridge (ADB) for Android 4.4 in the Android SDK Platform Tools 18.0.1 allows ADB servers to execute arbitrary code via a negative length value, which bypasses a signed comparison and triggers a stack-based buffer overflow.
- Record
CVE-2014-1909- Updated
- 2026-11-02
OSVDEBIAN-CVE-2014-1909 No score
Integer signedness error in system/core/adb/adb_client.c in Android Debug Bridge (ADB) for Android 4.4 in the Android SDK Platform Tools 18.0.1 allows ADB servers to execute arbitrary code via a negative length value, which bypasses a signed comparison and triggers a stack-based buffer overflow.
- Record
DEBIAN-CVE-2014-1909- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:10324-1 No score
android-tools-5.1.1_r8-3.5 on GA media
These are all security issues fixed in the android-tools-5.1.1_r8-3.5 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:10324-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
android-platform-system-coreDebian:11 |
before 1:6.0.0+r26-1~stage1 | 1:6.0.0+r26-1~stage1 |
android-toolsopenSUSE:Tumbleweed |
before 5.1.1_r8-3.5 | 5.1.1_r8-3.5 |
History
| When | Changed | Sources |
|---|---|---|
| 2026-11-03 | aliases | EUVD |
| 2026-11-02 | created | CVE List, GitHub Advisories, NVD, OSV |
References
lists.opensuse.org/opensuse-updates/2014-05/msg00038.html
seclists.org/oss-sec/2014/q1/291
exchange.xforce.ibmcloud.com/vulnerabilities/91291
securityfocus.com/bid/65403
nvd.nist.gov/vuln/detail/CVE-2014-1909
github.com/advisories/GHSA-58c5-6h84-hwh5
security-tracker.debian.org/tracker/CVE-2014-1909
suse.com/security/cve/CVE-2014-1909