CVE-2014-1909
Integer signedness error in system/core/adb/adb_client.c in Android Debug Bridge (ADB) for...
CVE-2014-1909 is a high vulnerability (CVSS 7.5) in Google Android Debug Bridge, published May 14, 2014. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.06%, the 81st percentile. Fixed in android-platform-system-core 1:6.0.0+r26-1~stage1.
- Severity
- 7.5 HighCVSS 2.0, NVD
- Exploit chance
- 2.06%EPSS, 81st percentile
- Exploitation
- None knownNot on CISA’s or ENISA’s lists
- Fixed in
1:6.0.0+r26-1~stage1android-platform-system-core +1 more
Description
Integer signedness error in system/core/adb/adb_client.c in Android Debug Bridge (ADB) for Android 4.4 in the Android SDK Platform Tools 18.0.1 allows ADB servers to execute arbitrary code via a negative length value, which bypasses a signed comparison and triggers a stack-based buffer overflow.
Exploit likelihood
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
android-platform-system-coreDebian:11 | before 1:6.0.0+r26-1~stage1 | 1:6.0.0+r26-1~stage1 |
android-toolsopenSUSE:Tumbleweed | before 5.1.1_r8-3.5 | 5.1.1_r8-3.5 |
What each source reports
NVD Score used
Integer signedness error in system/core/adb/adb_client.c in Android Debug Bridge (ADB) for Android 4.4 in the Android SDK Platform Tools 18.0.1 allows ADB servers to execute arbitrary code via a negative length value, which bypasses a signed comparison and triggers a stack-based buffer overflow.
- Record
CVE-2014-1909- CVSS 2.0
- 7.5 High
AV:N/AC:L/Au:N/C:P/I:P/A:P - Weakness
- CWE-189
- Updated
- 2026-11-02
CVE ListNo score
Integer signedness error in system/core/adb/adb_client.c in Android Debug Bridge (ADB) for Android 4.4 in the Android SDK Platform Tools 18.0.1 allows ADB servers to execute arbitrary code via a negative length value, which bypasses a signed comparison and triggers a stack-based buffer overflow.
- Record
CVE-2014-1909- Updated
- 2026-11-02
EUVDEUVD-2014-1970No score
Integer signedness error in system/core/adb/adb_client.c in Android Debug Bridge (ADB) for Android 4.4 in the Android SDK Platform Tools 18.0.1 allows ADB servers to execute arbitrary code via a negative length value, which bypasses a signed comparison and triggers a stack-based buffer overflow.
- Record
EUVD-2014-1970- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-58c5-6h84-hwh5No score
Integer signedness error in system/core/adb/adb_client.c in Android Debug Bridge (ADB) for...
Integer signedness error in system/core/adb/adb_client.c in Android Debug Bridge (ADB) for Android 4.4 in the Android SDK Platform Tools 18.0.1 allows ADB servers to execute arbitrary code via a negative length value, which bypasses a signed comparison and triggers a stack-based buffer overflow.
- Record
GHSA-58c5-6h84-hwh5- Updated
- 2026-11-02
OSVNo score
Integer signedness error in system/core/adb/adb_client.c in Android Debug Bridge (ADB) for Android 4.4 in the Android SDK Platform Tools 18.0.1 allows ADB servers to execute arbitrary code via a negative length value, which bypasses a signed comparison and triggers a stack-based buffer overflow.
- Record
CVE-2014-1909- Updated
- 2026-11-02
OSVDEBIAN-CVE-2014-1909No score
Integer signedness error in system/core/adb/adb_client.c in Android Debug Bridge (ADB) for Android 4.4 in the Android SDK Platform Tools 18.0.1 allows ADB servers to execute arbitrary code via a negative length value, which bypasses a signed comparison and triggers a stack-based buffer overflow.
- Record
DEBIAN-CVE-2014-1909- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:10324-1No score
android-tools-5.1.1_r8-3.5 on GA media
These are all security issues fixed in the android-tools-5.1.1_r8-3.5 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:10324-1- Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
References
lists.opensuse.org/opensuse-updates/2014-05/msg00038.html
seclists.org/oss-sec/2014/q1/291
exchange.xforce.ibmcloud.com/vulnerabilities/91291
securityfocus.com/bid/65403
nvd.nist.gov/vuln/detail/CVE-2014-1909
github.com/advisories/GHSA-58c5-6h84-hwh5
security-tracker.debian.org/tracker/CVE-2014-1909
suse.com/security/cve/CVE-2014-1909