CoreCVE
Back

HIGH KEV

The vold volume manager daemon on Android 3.0 and 2.x before 2.3.4 trusts messages that are received from a PF_NETLINK socket, which allows local users to execute arbitrary code and gain root privileges via a negative index that bypasses a maximum-only signed integer check in the DirectVolume::handlePartitionAdded method, which triggers memory corruption, as demonstrated by Gingerbreak

Published Jun 9, 2011 ·Due Sep 29, 2022

Description

The vold volume manager daemon on Android 3.0 and 2.x before 2.3.4 trusts messages that are received from a PF_NETLINK socket, which allows local users to execute arbitrary code and gain root privileges via a negative index that bypasses a maximum-only signed integer check in the DirectVolume::handlePartitionAdded method, which triggers memory corruption, as demonstrated by Gingerbreak.

Affected products

Remediation

No remediation recorded yet.

Metrics

Weaknesses (1)

CWE-190

Integer Overflow

References (10)

Change history (0)

No recorded changes yet.

Sources
CVE.org / MITRE
Status PUBLISHED
Assigner mitre
Published Jun 9, 2011
Updated Oct 22, 2025
Reserved Apr 20, 2011
Link CVE-2011-1823
CISA Vulnrichment
Updated Feb 7, 2025
NVD
Status Analyzed
Modified Jun 16, 2026
Link CVE-2011-1823
Red Hat
Severity n/a
Public date n/a
Links CVE-2011-1823