| Package | Affected versions | Patched versions |
|---|---|---|
| supersu | = 1.69 |
The Chainfire SuperSU package before 1.69 for Android allows attackers to gain privileges via the (1) backtick or (2) $() type of shell metacharacters in the -c option to /system/xbin/su.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free