Vulnerability · Published Apr 6, 2020 · Assigned by snyk

CVE-2020-7636

Critical 9.8

In plain English

A critical-severity security flaw in adb-driver. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 4.4% (higher than 91% of all known vulnerabilities).

Severity (CVSS NVD)9.8Critical

Exploit odds (30 days)4.4%top 8.7% of all CVEs

Exploited in the wildNo reportsnot in CISA KEV

Attack toolingNoneno public tooling known

Official description

adb-driver through 0.1.8 is vulnerable to Command Injection.It allows execution of arbitrary commands via the command function.

Affected packages & fixed versions

Ecosystem	Package	Fixed in	Advisory
npm	adb-driver	no fix listed	GHSA-4m6q-rxhm-675w

Affected products (as reported)

Vendor	Product	Versions
n/a	adb-driver	All versions including 0.1.8

References

https://snyk.io/vuln/SNYK-JS-ADBDRIVER-564430 x_refsource_MISC
https://www.npmjs.com/package/adb-driver x_refsource_MISC