CVE
CVE-2013-4787
Google · Android
- First Reported
- Nov 5, 2026
- Latest Reported
- Nov 5, 2026
CVE Enrichment
- CVSS
- 9.3 HIGH
- EPSS
- 13.53%
- EPSS Percentile
- 96.47%
- CISA KEV
- Not listed
Description
Android 1.6 Donut through 4.2 Jelly Bean does not properly check cryptographic signatures for applications, which allows attackers to execute arbitrary code via an application package file (APK) that is modified in a way that does not violate the cryptographic signature, probably involving multiple entries in a Zip file with the same name in which one entry is validated but the other entry is installed, aka Android security bug 8219321 and the "Master Key" vulnerability.
Technical Details
- CVSS Version
- 2.0
- CNA / NVD Source
- [email protected]
- Published
- 10-Jul-2013 00:55
- Last Modified
- 17-Jun-2026 06:57
- EPSS Date
- 2026-11-05
- CWE
- CWE-310
CVSS Vector
AV:N /
AC:M /
Au:N /
C:C /
I:C /
A:C
CNA Products / Version Status
- n/a · n/a
Source: CNA · [email protected]
Default status: unknown
n/a — affected
Affected Products / Versions
- google / android
Source: NVD CPE · affected
Version / affected range: 1.6
cpe:2.3:o:google:android:1.6:*:*:*:*:*:*:* - google / android
Source: NVD CPE · affected
Version / affected range: 2.0
cpe:2.3:o:google:android:2.0:*:*:*:*:*:*:* - google / android
Source: NVD CPE · affected
Version / affected range: 2.0.1
cpe:2.3:o:google:android:2.0.1:*:*:*:*:*:*:* - google / android
Source: NVD CPE · affected
Version / affected range: 2.1
cpe:2.3:o:google:android:2.1:*:*:*:*:*:*:* - google / android
Source: NVD CPE · affected
Version / affected range: 2.2
cpe:2.3:o:google:android:2.2:*:*:*:*:*:*:* - google / android
Source: NVD CPE · affected
Version / affected range: 2.2
cpe:2.3:o:google:android:2.2:rev1:*:*:*:*:*:* - google / android
Source: NVD CPE · affected
Version / affected range: 2.2.1
cpe:2.3:o:google:android:2.2.1:*:*:*:*:*:*:* - google / android
Source: NVD CPE · affected
Version / affected range: 2.2.2
cpe:2.3:o:google:android:2.2.2:*:*:*:*:*:*:* - google / android
Source: NVD CPE · affected
Version / affected range: 2.2.3
cpe:2.3:o:google:android:2.2.3:*:*:*:*:*:*:* - google / android
Source: NVD CPE · affected
Version / affected range: 2.3
cpe:2.3:o:google:android:2.3:*:*:*:*:*:*:* - google / android
Source: NVD CPE · affected
Version / affected range: 2.3
cpe:2.3:o:google:android:2.3:rev1:*:*:*:*:*:* - google / android
Source: NVD CPE · affected
Version / affected range: 2.3.1
cpe:2.3:o:google:android:2.3.1:*:*:*:*:*:*:* - google / android
Source: NVD CPE · affected
Version / affected range: 2.3.2
cpe:2.3:o:google:android:2.3.2:*:*:*:*:*:*:* - google / android
Source: NVD CPE · affected
Version / affected range: 2.3.3
cpe:2.3:o:google:android:2.3.3:*:*:*:*:*:*:* - google / android
Source: NVD CPE · affected
Version / affected range: 2.3.4
cpe:2.3:o:google:android:2.3.4:*:*:*:*:*:*:* - google / android
Source: NVD CPE · affected
Version / affected range: 2.3.5
cpe:2.3:o:google:android:2.3.5:*:*:*:*:*:*:* - google / android
Source: NVD CPE · affected
Version / affected range: 2.3.6
cpe:2.3:o:google:android:2.3.6:*:*:*:*:*:*:* - google / android
Source: NVD CPE · affected
Version / affected range: 2.3.7
cpe:2.3:o:google:android:2.3.7:*:*:*:*:*:*:* - google / android
Source: NVD CPE · affected
Version / affected range: 3.0
cpe:2.3:o:google:android:3.0:*:*:*:*:*:*:* - google / android
Source: NVD CPE · affected
Version / affected range: 3.1
cpe:2.3:o:google:android:3.1:*:*:*:*:*:*:* - google / android
Source: NVD CPE · affected
Version / affected range: 3.2
cpe:2.3:o:google:android:3.2:*:*:*:*:*:*:* - google / android
Source: NVD CPE · affected
Version / affected range: 3.2.1
cpe:2.3:o:google:android:3.2.1:*:*:*:*:*:*:* - google / android
Source: NVD CPE · affected
Version / affected range: 3.2.2
cpe:2.3:o:google:android:3.2.2:*:*:*:*:*:*:* - google / android
Source: NVD CPE · affected
Version / affected range: 3.2.4
cpe:2.3:o:google:android:3.2.4:*:*:*:*:*:*:* - google / android
Source: NVD CPE · affected
Version / affected range: 3.2.6
cpe:2.3:o:google:android:3.2.6:*:*:*:*:*:*:* - google / android
Source: NVD CPE · affected
Version / affected range: 4.0
cpe:2.3:o:google:android:4.0:*:*:*:*:*:*:* - google / android
Source: NVD CPE · affected
Version / affected range: 4.0.1
cpe:2.3:o:google:android:4.0.1:*:*:*:*:*:*:* - google / android
Source: NVD CPE · affected
Version / affected range: 4.0.2
cpe:2.3:o:google:android:4.0.2:*:*:*:*:*:*:* - google / android
Source: NVD CPE · affected
Version / affected range: 4.0.3
cpe:2.3:o:google:android:4.0.3:*:*:*:*:*:*:* - google / android
Source: NVD CPE · affected
Version / affected range: 4.0.4
cpe:2.3:o:google:android:4.0.4:*:*:*:*:*:*:* - google / android
Source: NVD CPE · affected
Version / affected range: 4.1
cpe:2.3:o:google:android:4.1:*:*:*:*:*:*:* - google / android
Source: NVD CPE · affected
Version / affected range: 4.1.2
cpe:2.3:o:google:android:4.1.2:*:*:*:*:*:*:* - google / android
Source: NVD CPE · affected
Version / affected range: 4.2
cpe:2.3:o:google:android:4.2:*:*:*:*:*:*:*
References
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108
Sources: NVD · FIRST EPSS · CISA KEV
Latest successful provider update; providers refresh independently.
Reported Context (1)
- Master Key (2013, CVE-2013-4787). An APK contained two files with the same name. Android checked the signature on the first and installed the second, so malicious code got in under a valid signature. GhostMap Android Flaw Can Trigger Persistent Crash Loops From a Crafted App
CVE (2)
Malware (3)
MITRE ATT&CK (2)
Vendors (2)
Products (3)
Tools (1)
Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.