CVE-2024-27350

Name of the Vulnerable Software and Affected Versions Amazon Fire OS versions 7.0.0 through 7.6.6.8 Amazon Fire OS versions 8.0.0 through 8.1.0.2

Description The issue allows Fire TV applications to establish local ADB (Android Debug Bridge) connections. This is only possible after the non-default ADB Debugging option is enabled and the initiator of the connection attempt has been approved via a full-screen prompt. Some third parties dispute the security relevance of this issue.

Recommendations For Amazon Fire OS versions 7.0.0 through 7.6.6.8, update to version 7.6.6.9 or later. For Amazon Fire OS versions 8.0.0 through 8.1.0.2, update to version 8.1.0.3 or later.