CVE-2013-6774: Untrusted search path vulnerability in the ChainsDD Superuser package 3.1.3 for Android 4.2.x and earlier,...

Security readout for executives and security teams

This issue affects old rooted Android setups that used specific Superuser or SuperSU packages. A malicious local app could potentially influence how the su process loads Java code and gain elevated privileges. The business risk is mainly legacy, rooted, or unmanaged Android devices, not current standard Android fleets. Exposure is likely limited to rooted Android 4.2.x or earlier devices running the named Superuser/SuperSU packages. Standard non-rooted enterprise devices are unlikely to be affected based on the supplied description. Treat this as a legacy-device hygiene issue unless your organization still uses rooted Android 4.2.x-era devices. Prioritize removal or isolation of those devices from sensitive workflows over emergency response. Mitigation focus: Inventory rooted Android devices running Android 4.2.x or earlier.; Remove unsupported rooted devices from managed or sensitive environments.; Upgrade Chainfire SuperSU to version 1.69 or later where applicable..

Prepared

Jun 14, 2026, 14:32 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.