Google Android Debug Bridge vulnerabilities

2 CVEs affecting Google Android Debug Bridge, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2014-1909, published 2014-05-14.

More from Google.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2014-1909, published 2014-05-14. High severity, CVSS 7.5. EPSS: 2.1% chance of exploitation in the next 30 days. Integer signedness error in system/core/adb/adb_client.c in Android Debug Bridge (ADB) for Android 4.4 in the Android SDK Platform Tools 18.0.1 allows ADB servers to execute arbitrary code via a…
• CVE-2012-5564, published 2013-02-14. Low severity, CVSS 3.3. EPSS: 0.3% chance of exploitation in the next 30 days. android-tools 4.1.1 in Android Debug Bridge (ADB) allows local users to overwrite arbitrary files via a symlink attack on /tmp/adb.log.