What’s Vulnerable › Vulnerabilities

CVE-2014-7224

• Severity: high (CVSS 8.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 2.0% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2020-02-07 · updated 2026-06-17
• Weakness: CWE-20

Description

A Code Execution vulnerability exists in Android prior to 4.4.0 related to the addJavascriptInterface method and the accessibility and accessibilityTraversal objects, which could let a remote malicious user execute arbitrary code.

Affected products

• Android: before 4.4 — fixed in 4.4

How to fix

Upgrade to a fixed version: Android 4.4. Check the vendor advisory for mitigations.

References

• http://www.openwall.com/lists/oss-security/2014/10/02/20
• https://daoyuan14.github.io/news/newattackvector.html
• https://exchange.xforce.ibmcloud.com/vulnerabilities/96833
• https://www.securityfocus.com/bid/70222
• http://www.openwall.com/lists/oss-security/2014/10/02/20
• https://daoyuan14.github.io/news/newattackvector.html
• https://exchange.xforce.ibmcloud.com/vulnerabilities/96833
• https://www.securityfocus.com/bid/70222

Get alerted when CVE-2014-7224 or the next vulnerability affects your stack