PT-2011-3393 · Google · Android

Akastealth · Published 2011-06-09 · Updated 2025-03-14 · CVE-2011-1823

Positive Technologies (AI Summary)

CVSS v2.0

7.2

High

Base vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Android versions prior to 2.3.4 Android version 3.0

Description The issue allows local users to execute arbitrary code and gain root privileges via a negative index that bypasses a maximum-only signed integer check in the DirectVolume::handlePartitionAdded method, which triggers memory corruption. This is demonstrated by Gingerbreak, where the vold volume manager daemon trusts messages received from a PF NETLINK socket.

Recommendations For Android versions prior to 2.3.4, update to version 2.3.4 or later to resolve the issue. For Android version 3.0, there is no information about a newer version that contains a fix for this vulnerability. As a temporary workaround, consider restricting access to the vold volume manager daemon to minimize the risk of exploitation.

Exploit

Integer Overflow

Weakness Enumeration

CWE-190

Related Identifiers

CVE-2011-1823

Affected Products

Android

References · 13

• 🔥 http://c-skills.blogspot.com/2011/04/yummy-yummy-gingerbreak.html · Exploit
• 🔥 http://forum.xda-developers.com/showthread.php?t=1044765 · Exploit
• 🔥 http://xorl.wordpress.com/2011/04/28/android-vold-mpartminors-signedness-issue · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2011-1823 · Security Note
• https://android.googlesource.com/platform/system/vold/+/c51920c82463b240e2be0430849837d6fdc5352e · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/67977 · Note
• https://t.me/cvenotify/114839 · Telegram Post
• http://android.git.kernel.org/?p=platform/system/netd.git%3Ba=commit%3Bh=79b579c92afc08ab12c0a5788d61f2dd2934836f · Note
• https://t.me/cvenotify/110394 · Telegram Post
• http://android.git.kernel.org/?p=platform/system/vold.git%3Ba=commit%3Bh=c51920c82463b240e2be0430849837d6fdc5352e · Note
• http://androidcommunity.com/gingerbreak-root-for-gingerbread-app-20110421 · Note
• http://androidpolice.com/2011/05/03/google-patches-gingerbreak-exploit-but-dont-worry-we-still-have-root-for-now · Note
• http://android.git.kernel.org/?p=platform/system/core.git%3Ba=commit%3Bh=b620a0b1c7ae486e979826200e8e441605b0a5d6 · Note