PT-2024-21841 · Amazon · Amazon Fire Os

Published 2024-02-24 · Updated 2025-09-18 · CVE-2024-27350

Positive Technologies (AI Summary)

CVSS v3.1

5.9

Medium

Base vector

AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

Name of the Vulnerable Software and Affected Versions Amazon Fire OS versions 7.0.0 through 7.6.6.8 Amazon Fire OS versions 8.0.0 through 8.1.0.2

Description The issue allows Fire TV applications to establish local ADB (Android Debug Bridge) connections. This is only possible after the non-default ADB Debugging option is enabled and the initiator of the connection attempt has been approved via a full-screen prompt. Some third parties dispute the security relevance of this issue.

Recommendations For Amazon Fire OS versions 7.0.0 through 7.6.6.8, update to version 7.6.6.9 or later. For Amazon Fire OS versions 8.0.0 through 8.1.0.2, update to version 8.1.0.3 or later.

Exploit

Fix

Related Identifiers

CVE-2024-27350

Affected Products

Amazon Fire Os

References · 9

• 🔥 https://aftvnews.com/amazon-blocks-long-running-fire-tv-capability-breaking-popular-apps-with-no-warning-and-giving-developers-the-runaround · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2024-27350 · Security Note
• https://osv.dev/vulnerability/CVE-2024-27350 · Vendor Advisory
• https://t.me/cveNotify/135817 · Telegram Post
• https://t.me/cvenotify/101441 · Telegram Post
• https://developer.amazon.com/docs/fire-tv/fire-os-overview.html · Note
• https://twitter.com/CVEnew/status/1761600048461451562 · Twitter Post
• https://news.ycombinator.com/item?id=39496861 · Note
• https://twitter.com/VulmonFeeds/status/1762172017468399865 · Twitter Post