CVE-2013-6768: Koushik Dutta Superuser

Medium severity, CVSS 5.0. EPSS: 1.1% chance of exploitation in the next 30 days.

Untrusted search path vulnerability in the CyanogenMod/ClockWorkMod/Koush Superuser package 1.0.2.1 for Android 4.2.x and earlier allows attackers to trigger the launch of a Trojan horse app_process program via a crafted PATH environment variable for a /system/xbin/su process.

Affected products

Published 2014-03-31. Last modified 2026-06-17.