Beveiligingsadvies

CVE-2011-1823

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2011-06-09 10:00:00

Laatst bijgewerkt 2025-10-22 00:05:49

Toegewezen door mitre

CVSS-score 7.8

Status PUBLISHED

Beschrijving

The vold volume manager daemon on Android 3.0 and 2.x before 2.3.4 trusts messages that are received from a PF_NETLINK socket, which allows local users to execute arbitrary code and gain root privileges via a negative index that bypasses a maximum-only signed integer check in the DirectVolume::handlePartitionAdded method, which triggers memory corruption, as demonstrated by Gingerbreak.

← Alle CVE's bekijken Bekijk op cve.org ↗