← Vulnerability Intelligence

CVE-2011-1823

High 7.8 Exploited in the wild (KEV)

Confirmed active exploitation — CISA KEV catalog

Name
Android OS Privilege Escalation Vulnerability
Added to catalog
Remediation due date (US federal)
Required action
Apply updates per vendor instructions.

Description

The vold volume manager daemon on Android 3.0 and 2.x before 2.3.4 trusts messages that are received from a PF_NETLINK socket, which allows local users to execute arbitrary code and gain root privileges via a negative index that bypasses a maximum-only signed integer check in the DirectVolume::handlePartitionAdded method, which triggers memory corruption, as demonstrated by Gingerbreak.

Metrics

CVSS 3.1
7.8 (HIGH) Score source: NVD CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS — exploit probability
41% (percentile: 99) as of 1 November 2026
CWE
CWE-190

Affected products

google: android

References