CVE-2011-1823

Published Jun 9, 2011 CVSS 3.1 · 7.8 High EPSS 41.4% KEV · Listed
Description
The vold volume manager daemon on Android 3.0 and 2.x before 2.3.4 trusts messages that are received from a PF_NETLINK socket, which allows local users to execute arbitrary code and gain root privileges via a negative index that bypasses a maximum-only signed integer check in the DirectVolume::handlePartitionAdded method, which triggers memory corruption, as demonstrated by Gingerbreak.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

No advisories available
History
Type Values Removed Values Added
Metrics epss

{'score': 0.73728}

epss

{'score': 0.69256}

Type Values Removed Values Added
Metrics kev

{'dateAdded': '2022-09-08'}

ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'active', 'Technical Impact': 'total'}, 'version': '2.0.3'}

Weaknesses

Sources

Status
PUBLISHED
Assigner
mitre
Published
Updated
Oct 22, 2025, 12:05 AM
Reserved
Apr 20, 2011, 12:00 AM
Status
Analyzed
Published
Jun 9, 2011, 10:36 AM
Modified
Jun 16, 2026, 11:30 PM