← Back

CVE-2014-3100

nvd nist
Published: Jul 2, 2014Modified: May 6, 2026

JSON object

Loading...
5.1
Vector
AV:N/AC:H/Au:N/C:P/I:P/A:P
Exploitability: 4.9 / Impact: 6.4
Source: NVD

Description

Stack-based buffer overflow in the encode_key function in /system/bin/keystore in the KeyStore service in Android 4.3 allows attackers to execute arbitrary code, and consequently obtain sensitive key information or bypass intended restrictions on cryptographic operations, via a long key name.

Affected (1)

Products: Google: Android
1 product
Android
Configuration A
1 vulnerable
Vulnerable SoftwareAffected Versions
Version 4.3

Timeline

No history available yet.