The vold volume manager daemon on Android 3.0 and 2.x before 2.3.4 trusts messages that are received from a PF_NETLINK socket, which allows local users to execute arbitrary code and gain root privileges via a negative index that bypasses a maximum-only signed integer check in the DirectVolume::handlePartitionAdded method, which triggers memory corruption, as demonstrated by Gingerbreak.
Metrics
Affected Vendors & Products
References
History
Mon, 14 Jul 2025 13:45:00 +0000
Type | Values Removed | Values Added |
---|---|---|
Metrics |
epss
|
epss
|
Fri, 07 Feb 2025 15:15:00 +0000
Type | Values Removed | Values Added |
---|---|---|
Metrics |
kev
|

Status: PUBLISHED
Assigner: mitre
Published: 2011-06-09T10:00:00.000Z
Updated: 2025-07-30T01:47:02.281Z
Reserved: 2011-04-20T00:00:00.000Z
Link: CVE-2011-1823

Updated: 2024-08-06T22:37:25.911Z

Status : Deferred
Published: 2011-06-09T10:36:27.680
Modified: 2025-04-11T00:51:21.963
Link: CVE-2011-1823

No data.