CVE-2014-3100: Google Android

Medium severity, CVSS 5.1. EPSS: 1.8% chance of exploitation in the next 30 days.

Stack-based buffer overflow in the encode_key function in /system/bin/keystore in the KeyStore service in Android 4.3 allows attackers to execute arbitrary code, and consequently obtain sensitive key information or bypass intended restrictions on cryptographic operations, via a long key name.

Affected products

• Google Android: version 4.3 only

Published 2014-07-02. Last modified 2026-06-17.