CVE-2014-7953

Severity: high (CVSS 7.0 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2017-07-07 · updated 2026-06-17
Weakness: CWE-362

Description

Race condition in the bindBackupAgent method in the ActivityManagerService in Android 4.4.4 allows local users with adb shell access to execute arbitrary code or any valid package as system by running "pm install" with the target apk, and simultaneously running a crafted script to process logcat's output looking for a dexopt line, which once found should execute bindBackupAgent with the uid member of the ApplicationInfo parameter set to 1000.

Affected products

Android: 4.4.4

References

http://seclists.org/fulldisclosure/2015/Apr/52
http://www.securityfocus.com/archive/1/535296/100/1100/threaded
http://www.securityfocus.com/bid/74213
https://android.googlesource.com/platform/frameworks/base/+/a8f6d1b%5E%21/
http://seclists.org/fulldisclosure/2015/Apr/52
http://www.securityfocus.com/archive/1/535296/100/1100/threaded
http://www.securityfocus.com/bid/74213
https://android.googlesource.com/platform/frameworks/base/+/a8f6d1b%5E%21/

Get alerted when CVE-2014-7953 or the next vulnerability affects your stack