CVE-2011-1823
Android OS Privilege Escalation Vulnerability
Does this matter?
Known to be exploited in the wild (CISA KEV, CISA remediation deadline 29 September 2022). Treat as an emergency change: patch or isolate now, then hunt for prior compromise.
Description
The vold volume manager daemon on Android 3.0 and 2.x before 2.3.4 trusts messages that are received from a PF_NETLINK socket, which allows local users to execute arbitrary code and gain root privileges via a negative index that bypasses a maximum-only signed integer check in the DirectVolume::handlePartitionAdded method, which triggers memory corruption, as demonstrated by Gingerbreak.
- CVSS 3.1
- 7.8 HIGHCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- EPSS
- 41.37% probability · 99th percentile
- Public exploits
- None in Exploit-DB
- CISA KEV
- Listed 8 September 2022 · due 29 September 2022
- Weakness
- CWE-190
- Affected
- google/android
- Source
- cve@mitre.org
EPSS 41.4% since 26 October 2026; no change recorded yet. The dashed line is the ten per cent mark our analysts treat as “patch before the next change window”. Points are recorded when the score first appears and whenever it moves by a percentage point or more.
CISA notes
Apply updates per vendor instructions. https://android.googlesource.com/platform/system/vold/+/c51920c82463b240e2be0430849837d6fdc5352e; https://nvd.nist.gov/vuln/detail/CVE-2011-1823
References
- http://android.git.kernel.org/?p=platform/system/core.git%3Ba=commit%3Bh=b620a0b1c7ae486e979826200e8e441605b0a5d6Broken Link
- http://android.git.kernel.org/?p=platform/system/netd.git%3Ba=commit%3Bh=79b579c92afc08ab12c0a5788d61f2dd2934836fBroken Link
- http://android.git.kernel.org/?p=platform/system/vold.git%3Ba=commit%3Bh=c51920c82463b240e2be0430849837d6fdc5352eBroken Link
- http://androidcommunity.com/gingerbreak-root-for-gingerbread-app-20110421/Broken Link
- http://c-skills.blogspot.com/2011/04/yummy-yummy-gingerbreak.htmlExploit, Issue Tracking
- http://forum.xda-developers.com/showthread.php?t=1044765Exploit, Issue Tracking
- http://www.androidpolice.com/2011/05/03/google-patches-gingerbreak-exploit-but-dont-worry-we-still-have-root-for-now/Press/Media Coverage
- http://xorl.wordpress.com/2011/04/28/android-vold-mpartminors-signedness-issue/Exploit
- https://exchange.xforce.ibmcloud.com/vulnerabilities/67977Third Party Advisory, VDB Entry
- http://android.git.kernel.org/?p=platform/system/core.git%3Ba=commit%3Bh=b620a0b1c7ae486e979826200e8e441605b0a5d6Broken Link
- http://android.git.kernel.org/?p=platform/system/netd.git%3Ba=commit%3Bh=79b579c92afc08ab12c0a5788d61f2dd2934836fBroken Link
- http://android.git.kernel.org/?p=platform/system/vold.git%3Ba=commit%3Bh=c51920c82463b240e2be0430849837d6fdc5352eBroken Link
- http://androidcommunity.com/gingerbreak-root-for-gingerbread-app-20110421/Broken Link
- http://c-skills.blogspot.com/2011/04/yummy-yummy-gingerbreak.htmlExploit, Issue Tracking
- http://forum.xda-developers.com/showthread.php?t=1044765Exploit, Issue Tracking
- http://www.androidpolice.com/2011/05/03/google-patches-gingerbreak-exploit-but-dont-worry-we-still-have-root-for-now/Press/Media Coverage
- http://xorl.wordpress.com/2011/04/28/android-vold-mpartminors-signedness-issue/Exploit
- https://exchange.xforce.ibmcloud.com/vulnerabilities/67977Third Party Advisory, VDB Entry
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2011-1823US Government Resource
Source: NVD record, EPSS from FIRST.org, KEV from CISA, exploits from Exploit-DB. Refreshed daily. Download this record as JSON.