CVE-2014-3100

Stack-based buffer overflow in the encode_key function in /system/bin/keystore in the KeyStore service in Android 4.3 allows attackers to execute arbitrary code, and consequently obtain sensitive key information or bypass intended restrictions on cryptographic operations, via a long key name.

Date published : 2014-07-01

http://www.securityfocus.com/bid/68152

http://www.securityfocus.com/archive/1/532527/100/0/threaded