Every CVESearch/Get API key

CVE-2014-1909

Integer signedness error in system/core/adb/adb_client.c in Android Debug Bridge (ADB) for...

7.5 HighFix available

Integer signedness error in system/core/adb/adb_client.c in Android Debug Bridge (ADB) for Android 4.4 in the Android SDK Platform Tools 18.0.1 allows ADB servers to execute arbitrary code via a negative length value, which bypasses a signed comparison and triggers a stack-based buffer overflow.

Exploit likelihood

2.06%Down 0.9 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used7.5

Integer signedness error in system/core/adb/adb_client.c in Android Debug Bridge (ADB) for Android 4.4 in the Android SDK Platform Tools 18.0.1 allows ADB servers to execute arbitrary code via a negative length value, which bypasses a signed comparison and triggers a stack-based buffer overflow.

Record
CVE-2014-1909
CVSS 2.0
7.5 HighAV:N/AC:L/Au:N/C:P/I:P/A:P
Weakness
CWE-189
Updated
2026-11-02
CVE ListNo score

Integer signedness error in system/core/adb/adb_client.c in Android Debug Bridge (ADB) for Android 4.4 in the Android SDK Platform Tools 18.0.1 allows ADB servers to execute arbitrary code via a negative length value, which bypasses a signed comparison and triggers a stack-based buffer overflow.

Record
CVE-2014-1909
Updated
2026-11-02
EUVDEUVD-2014-1970No score

Integer signedness error in system/core/adb/adb_client.c in Android Debug Bridge (ADB) for Android 4.4 in the Android SDK Platform Tools 18.0.1 allows ADB servers to execute arbitrary code via a negative length value, which bypasses a signed comparison and triggers a stack-based buffer overflow.

Record
EUVD-2014-1970
Updated
2026-11-03
GitHub AdvisoriesGHSA-58c5-6h84-hwh5No score

Integer signedness error in system/core/adb/adb_client.c in Android Debug Bridge (ADB) for...

Integer signedness error in system/core/adb/adb_client.c in Android Debug Bridge (ADB) for Android 4.4 in the Android SDK Platform Tools 18.0.1 allows ADB servers to execute arbitrary code via a negative length value, which bypasses a signed comparison and triggers a stack-based buffer overflow.

Record
GHSA-58c5-6h84-hwh5
Updated
2026-11-02
OSVNo score

Integer signedness error in system/core/adb/adb_client.c in Android Debug Bridge (ADB) for Android 4.4 in the Android SDK Platform Tools 18.0.1 allows ADB servers to execute arbitrary code via a negative length value, which bypasses a signed comparison and triggers a stack-based buffer overflow.

Record
CVE-2014-1909
Updated
2026-11-02
OSVDEBIAN-CVE-2014-1909No score

Integer signedness error in system/core/adb/adb_client.c in Android Debug Bridge (ADB) for Android 4.4 in the Android SDK Platform Tools 18.0.1 allows ADB servers to execute arbitrary code via a negative length value, which bypasses a signed comparison and triggers a stack-based buffer overflow.

Record
DEBIAN-CVE-2014-1909
Updated
2026-11-02
OSVopenSUSE-SU-2024:10324-1No score

android-tools-5.1.1_r8-3.5 on GA media

These are all security issues fixed in the android-tools-5.1.1_r8-3.5 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:10324-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
android-platform-system-core
Debian:11
before 1:6.0.0+r26-1~stage1
1:6.0.0+r26-1~stage1
android-tools
openSUSE:Tumbleweed
before 5.1.1_r8-3.5
5.1.1_r8-3.5

History

History
RecordedChangedSources
facts
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2014-1909 is a high vulnerability (CVSS 7.5) in Google Android Debug Bridge, published May 14, 2014. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.06%, the 81st percentile. Fixed in android-platform-system-core 1:6.0.0+r26-1~stage1.

References

PagesAll vulnerabilitiesBrowseDocsSourcesGuideGet API key
MoveEnter Open