The application link interface in the NTT DOCOMO sp mode mail application 6100 through…
Priority LOW 22CWE-264Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- — Not recorded in CVSS 2.0
- Attack complexity
- Medium
- Impact type
- Security bypass
- Confidentiality · integrity · availability
- Partial · None · None
- Fix status
- No fix listed
Attack profile from CVSS 2.0 · NVD. Fix status from CNA. Impact type from CWE-264.
Summary
The application link interface in the NTT DOCOMO sp mode mail application 6100 through 6300 for Android 4.0.x and 6130 through 6700 for Android 4.1 through 4.4 writes message content to the SD card during e-mail composition, which allows attackers to obtain sensitive information via a crafted application.
Why it matters now
EPSS 0.00893 59th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| — | — | all versions | — | No fix listed | CNA |
- — Vendor— Affected all versions Fixed in — No fix listed CNA
CPE configurations NVD · 17
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:nttdocomo:spmode_mail_android:6100:*:*:*:*:android:*:* | 6100 | Vulnerable | NTT DOCOMO, INC. |
| cpe:2.3:a:nttdocomo:spmode_mail_android:6300:*:*:*:*:android:*:* | 6300 | Vulnerable | NTT DOCOMO, INC. |
| cpe:2.3:o:google:android:4.0:*:*:*:*:*:*:* | 4.0 | Running on | |
| cpe:2.3:o:google:android:4.0.1:*:*:*:*:*:*:* | 4.0.1 | Running on | |
| cpe:2.3:o:google:android:4.0.2:*:*:*:*:*:*:* | 4.0.2 | Running on | |
| cpe:2.3:o:google:android:4.0.3:*:*:*:*:*:*:* | 4.0.3 | Running on | |
| cpe:2.3:o:google:android:4.0.4:*:*:*:*:*:*:* | 4.0.4 | Running on | |
| cpe:2.3:a:nttdocomo:spmode_mail_android:6130:*:*:*:*:android:*:* | 6130 | Vulnerable | NTT DOCOMO, INC. |
| cpe:2.3:a:nttdocomo:spmode_mail_android:6700:*:*:*:*:android:*:* | 6700 | Vulnerable | NTT DOCOMO, INC. |
| cpe:2.3:o:google:android:4.1:*:*:*:*:*:*:* | 4.1 | Running on |
- cpe:2.3:a:nttdocomo:spmode_mail_android:6100:*:*:*:*:android:*:* Versions 6100 Vulnerable ·NTT DOCOMO, INC.
- cpe:2.3:a:nttdocomo:spmode_mail_android:6300:*:*:*:*:android:*:* Versions 6300 Vulnerable ·NTT DOCOMO, INC.
- cpe:2.3:o:google:android:4.0:*:*:*:*:*:*:* Versions 4.0 Running on ·Google
- cpe:2.3:o:google:android:4.0.1:*:*:*:*:*:*:* Versions 4.0.1 Running on ·Google
- cpe:2.3:o:google:android:4.0.2:*:*:*:*:*:*:* Versions 4.0.2 Running on ·Google
- cpe:2.3:o:google:android:4.0.3:*:*:*:*:*:*:* Versions 4.0.3 Running on ·Google
- cpe:2.3:o:google:android:4.0.4:*:*:*:*:*:*:* Versions 4.0.4 Running on ·Google
- cpe:2.3:a:nttdocomo:spmode_mail_android:6130:*:*:*:*:android:*:* Versions 6130 Vulnerable ·NTT DOCOMO, INC.
- cpe:2.3:a:nttdocomo:spmode_mail_android:6700:*:*:*:*:android:*:* Versions 6700 Vulnerable ·NTT DOCOMO, INC.
- cpe:2.3:o:google:android:4.1:*:*:*:*:*:*:* Versions 4.1 Running on ·Google
Show 7 more CPE
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:google:android:4.1.2:*:*:*:*:*:*:* | 4.1.2 | Running on | |
| cpe:2.3:o:google:android:4.2:*:*:*:*:*:*:* | 4.2 | Running on | |
| cpe:2.3:o:google:android:4.2.1:*:*:*:*:*:*:* | 4.2.1 | Running on | |
| cpe:2.3:o:google:android:4.2.2:*:*:*:*:*:*:* | 4.2.2 | Running on | |
| cpe:2.3:o:google:android:4.3:*:*:*:*:*:*:* | 4.3 | Running on | |
| cpe:2.3:o:google:android:4.3.1:*:*:*:*:*:*:* | 4.3.1 | Running on | |
| cpe:2.3:o:google:android:4.4:*:*:*:*:*:*:* | 4.4 | Running on |
- cpe:2.3:o:google:android:4.1.2:*:*:*:*:*:*:* Versions 4.1.2 Running on ·Google
- cpe:2.3:o:google:android:4.2:*:*:*:*:*:*:* Versions 4.2 Running on ·Google
- cpe:2.3:o:google:android:4.2.1:*:*:*:*:*:*:* Versions 4.2.1 Running on ·Google
- cpe:2.3:o:google:android:4.2.2:*:*:*:*:*:*:* Versions 4.2.2 Running on ·Google
- cpe:2.3:o:google:android:4.3:*:*:*:*:*:*:* Versions 4.3 Running on ·Google
- cpe:2.3:o:google:android:4.3.1:*:*:*:*:*:*:* Versions 4.3.1 Running on ·Google
- cpe:2.3:o:google:android:4.4:*:*:*:*:*:*:* Versions 4.4 Running on ·Google
Remediation
No fixed version listed by the sources yet.
Timeline
- 2026-10-02 Threatist record created from CVE-2014-1978
- 2026-10-03 Alias added: GHSA-vpvx-c88x-j987
References
Advisory 2
More NTT DOCOMO, INC. Spmode Mail Android vulnerabilities
- TI-2014-01548 The NTT DOCOMO sp mode mail application 5900 through 6300 for Android 4.0.x and 6000… CVSS 2.0MEDIUM 6.8
- TI-2012-01141 The NTT DOCOMO sp mode mail application 5400 and earlier for Android does not properly… CVSS 2.0MEDIUM 5.8
- TI-2014-01546 The NTT DOCOMO sp mode mail application 6300 and earlier for Android 4.0.x and 6700 and… CVSS 2.0MEDIUM 4.3
Sources
- CVE-2014-1978 · CVE Program
- CVE-2014-1978 · NVD
- FIRST EPSS
- GHSA-vpvx-c88x-j987 · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences