CVE-2014-3100

Stack-based buffer overflow in the encode_key function in /system/bin/keystore in the KeyStore service in Android 4.3 allows attackers to execute arbitrary…

published July 2, 2014

CVSS
—
EPSS
2%
Percentile
77.6
In the wild
Unconfirmed
What it is

Stack-based buffer overflow in the encode_key function in /system/bin/keystore in the KeyStore service in Android 4.3 allows attackers to execute arbitrary code, and consequently obtain sensitive key information or bypass intended restrictions on cryptographic operations, via a long key name.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01757 · 77.6th percentile
Published
2014-07-02T01:00Z
EPSS history
Timeline
  • 02 JUL 01:00Z
    Stack-based buffer overflow in the encode_key function in /system/bin/keystore in the KeyStore service in Android 4.3 allows attackers to execute arbitrary…
    cvelistv5