The vold volume manager daemon on Android 3.0 and 2.x before 2.3.4 trusts messages that are received from a PF_NETLINK socket, which allows local users to execute arbitrary code and gain root privileges via a negative index that bypasses a maximum-only signed integer check in the DirectVolume::handlePartitionAdded method, which triggers memory corruption, as demonstrated by Gingerbreak.
References
Configurations
Configuration 1 (hide)
|
History
07 Nov 2023, 02:07
Type | Values Removed | Values Added |
---|---|---|
References |
|
|
Information
Published : 2011-06-09 10:36
Updated : 2023-12-10 11:03
NVD link : CVE-2011-1823
Mitre link : CVE-2011-1823
CVE.ORG link : CVE-2011-1823
JSON object : View
Products Affected
- android
CWE
CWE-189
Numeric Errors