CVE-2013-6774

Severity: critical (CVSS 10.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.6% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2014-03-31 · updated 2026-06-17

Description

Untrusted search path vulnerability in the ChainsDD Superuser package 3.1.3 for Android 4.2.x and earlier, CyanogenMod/ClockWorkMod/Koush Superuser package 1.0.2.1 for Android 4.2.x and earlier, and Chainfire SuperSU package before 1.69 for Android 4.2.x and earlier allows attackers to load an arbitrary .jar file and gain privileges via a crafted BOOTCLASSPATH environment variable for a /system/xbin/su process. NOTE: another researcher was unable to reproduce this with ChainsDD Superuser.

Affected products

Androidsu Chainsdd Superuser: 3.1.3
Chainfire Supersu: 1.69
Koushik Dutta Superuser: 1.0.2.1

References

http://www.securityfocus.com/archive/1/529796
http://www.securityfocus.com/archive/1/529822
http://www.securityfocus.com/archive/1/529796
http://www.securityfocus.com/archive/1/529822

Get alerted when CVE-2013-6774 or the next vulnerability affects your stack