Unrated severityNVD Advisory· Published May 14, 2014· Updated Jun 17, 2026

CVE-2014-1909

Description

Integer signedness error in system/core/adb/adb_client.c in Android Debug Bridge (ADB) for Android 4.4 in the Android SDK Platform Tools 18.0.1 allows ADB servers to execute arbitrary code via a negative length value, which bypasses a signed comparison and triggers a stack-based buffer overflow.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Google/Android Debug Bridge2 versions
cpe:2.3:a:google:android_debug_bridge:-:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:google:android_debug_bridge:-:*:*:*:*:*:*:*
- (no CPE)
Google/Android SDK Platform Tools
cpe:2.3:a:google:android_sdk_platform_tools:18.0.1:*:*:*:*:*:*:*
OpenSUSE/openSUSE2 versions
cpe:2.3:o:opensuse:opensuse:12.3:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:opensuse:opensuse:12.3:*:*:*:*:*:*:*
- cpe:2.3:o:opensuse:opensuse:13.1:*:*:*:*:*:*:*
osv-coords
pkg:rpm/opensuse/android-tools&distro=openSUSE%20Tumbleweed
Range: < 5.1.1_r8-3.5

cvss	0.000
epss	0.002
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000

CVE-2014-1909

Description

AI Insight

Affected products

Patches

Vulnerability mechanics

References

News mentions