Skip to content
OpenAdvisories
Unscored CVE-2014-3100 EUVD-2014-3121GHSA-gc9v-4xv7-g396

Stack-based buffer overflow in the encode_key function in /system/bin/keystore in the KeyStore service in Android 4.3 allows attackers to e…

Published Jul 2, 2014 · Updated Aug 6, 2024 · Assigned by ibm

Description

Stack-based buffer overflow in the encode_key function in /system/bin/keystore in the KeyStore service in Android 4.3 allows attackers to execute arbitrary code, and consequently obtain sensitive key information or bypass intended restrictions on cryptographic operations, via a long key name.

References