VULNERABILITY INTELLIGENCE

CVE-2014-3100

CVSS score5.1 MEDIUM
EPSS probability1.76%
CISA KEVNot currently listed
Published2014-07-02
Last modified2026-06-17
CVSS vectorAV:N/AC:H/Au:N/C:P/I:P/A:P

Description

Stack-based buffer overflow in the encode_key function in /system/bin/keystore in the KeyStore service in Android 4.3 allows attackers to execute arbitrary code, and consequently obtain sensitive key information or bypass intended restrictions on cryptographic operations, via a long key name.

Weakness classification

  • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer

Primary references