CVE-2014-1978

Severity: medium (CVSS 4.3 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.9% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2014-03-19 · updated 2026-06-17
Weakness: CWE-264

Description

The application link interface in the NTT DOCOMO sp mode mail application 6100 through 6300 for Android 4.0.x and 6130 through 6700 for Android 4.1 through 4.4 writes message content to the SD card during e-mail composition, which allows attackers to obtain sensitive information via a crafted application.

Affected products

Nttdocomo Spmode Mail Android: 6100, 6300, 6130, 6700

References

http://jvn.jp/en/jp/JVN05951929/index.html
http://jvndb.jvn.jp/jvndb/JVNDB-2014-000028
http://jvn.jp/en/jp/JVN05951929/index.html
http://jvndb.jvn.jp/jvndb/JVNDB-2014-000028

Get alerted when CVE-2014-1978 or the next vulnerability affects your stack