VYPR
← All advisories
Unrated severityNVD Advisory· Published Mar 31, 2014· Updated Jun 17, 2026

CVE-2013-6775

CVE-2013-6775

Description

The Chainfire SuperSU package before 1.69 for Android allows attackers to gain privileges via the (1) backtick or (2) $() type of shell metacharacters in the -c option to /system/xbin/su.

Affected products

2
  • Chainfire/Supersu2 versions
    cpe:2.3:a:chainfire:supersu:1.69:*:*:*:*:android:*:*+ 1 more
    • cpe:2.3:a:chainfire:supersu:1.69:*:*:*:*:android:*:*
    • (no CPE)range: <1.69

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.