CVE-2014-7953
HighSummary
A race condition in the bindBackupAgent method in ActivityManagerService in Android 4.4.4 allows local users with adb shell access to execute arbitrary code or any valid package as system.
Risk Assessment
An attacker could gain unauthorized access to system-level permissions, potentially leading to serious security breaches on Android devices.
Recommendation
It is recommended to update Android to a newer version to mitigate this vulnerability and to restrict adb shell access to trusted users.
Other vulnerabilities in ActivityManagerService
See all- CVE-2017-13159High
An information disclosure vulnerability exists in the Android system (activitymanagerservice). It affects Android versions 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, and 8.0.
- CVE-2017-13158High
An information disclosure vulnerability exists in the Android system (activitymanagerservice). It affects versions 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, and 8.0.
- CVE-2017-13157High
There is an information disclosure vulnerability in the Android system (activitymanagerservice). It affects Android versions 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, and 8.0.
Original NVD description (English source)
Race condition in the bindBackupAgent method in the ActivityManagerService in Android 4.4.4 allows local users with adb shell access to execute arbitrary code or any valid package as system by running "pm install" with the target apk, and simultaneously running a crafted script to process logcat's output looking for a dexopt line, which once found should execute bindBackupAgent with the uid member of the ApplicationInfo parameter set to 1000.