CVE-2011-1823

Android OS Privilege Escalation Vulnerability

Android

The vold volume manager daemon on Android 3.0 and 2.x before 2.3.4 trusts messages that are received from a PF_NETLINK socket, which allows local users to execute arbitrary code and gain root privileges via a negative index that bypasses a maximum-only signed integer check in the DirectVolume::handlePartitionAdded method, which triggers memory corruption, as demonstrated by Gingerbreak.

9. Jun 2011

Ausgewertete Quellen

• Hinweis
  https://exchange.xforce.ibmcloud.com/vulnerabilities/67977
• CISA
  https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2011-1823
• CISA
  Android OS Privilege Escalation Vulnerability
• NVD
  CVE-2011-1823