CVE-2011-1823 The vold volume manager daemon on Android 3.0 and 2.x before 2.3.4 trusts messages that are received from a PF_NETLINK socket, which allows local users to execute arbitrary code and gain root privileg...
HighCVSS 7.8
EPSS 41.4%
CISA KEV
added 2022-09-08 · due 2022-09-29
Exploited in the wild
- Published
- Updated
- Exploit status
- Exploited in the wild (confirmed)
Description
The vold volume manager daemon on Android 3.0 and 2.x before 2.3.4 trusts messages that are received from a PF_NETLINK socket, which allows local users to execute arbitrary code and gain root privileges via a negative index that bypasses a maximum-only signed integer check in the DirectVolume::handlePartitionAdded method, which triggers memory corruption, as demonstrated by Gingerbreak.
CISA Known Exploited Vulnerability
- Date added
- 2022-09-08
- Due date (FCEB)
- 2022-09-29
- Ransomware use
- Unknown
Required action
Apply updates per vendor instructions.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Google Android | >= 2.0, < 2.3.4 | 2.3.4 |
| Google Android | = 3.0 | No fix listed |
References
- android.git.kernel.org broken-link
- android.git.kernel.org broken-link
- android.git.kernel.org broken-link
- androidcommunity.com broken-link
- c-skills.blogspot.com exploit issue-tracking
- forum.xda-developers.com exploit issue-tracking
- www.androidpolice.com press-media-coverage
- xorl.wordpress.com exploit
- android-vold-priv-escalation(67977) third-party-advisory vdb-entry
- www.cisa.gov government-resource us-government-resource