CVE-2013-6775: Chainfire Supersu

High severity, CVSS 10.0. EPSS: 1.6% chance of exploitation in the next 30 days.

The Chainfire SuperSU package before 1.69 for Android allows attackers to gain privileges via the (1) backtick or (2) $() type of shell metacharacters in the -c option to /system/xbin/su.

Affected products

• Chainfire Supersu: version 1.69 only

Published 2014-03-31. Last modified 2026-06-17.