CVE-2014-3164: Google Android

High severity, CVSS 7.5. EPSS: 1% chance of exploitation in the next 30 days.

cmds/servicemanager/service_manager.c in Android before commit 7d42a3c31ba78a418f9bdde0e0ab951469f321b5 allows attackers to cause a denial of service (NULL pointer dereference, or out-of-bounds write) via vectors related to binder passed lengths.

Affected products

• Google Android: up to and including 4.4.4

Published 2017-10-18. Last modified 2026-06-17.