High severity7.8CISA KEVNVD Advisory· Published Jun 9, 2011· Updated Apr 21, 2026
CVE-2011-1823
CVE-2011-1823
Description
The vold volume manager daemon on Android 3.0 and 2.x before 2.3.4 trusts messages that are received from a PF_NETLINK socket, which allows local users to execute arbitrary code and gain root privileges via a negative index that bypasses a maximum-only signed integer check in the DirectVolume::handlePartitionAdded method, which triggers memory corruption, as demonstrated by Gingerbreak.
Affected products
2Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
10- c-skills.blogspot.com/2011/04/yummy-yummy-gingerbreak.htmlnvdExploitIssue Tracking
- forum.xda-developers.com/showthread.phpnvdExploitIssue Tracking
- xorl.wordpress.com/2011/04/28/android-vold-mpartminors-signedness-issue/nvdExploit
- exchange.xforce.ibmcloud.com/vulnerabilities/67977nvdThird Party AdvisoryVDB Entry
- android.git.kernel.orgnvdBroken Link
- android.git.kernel.orgnvdBroken Link
- android.git.kernel.orgnvdBroken Link
- androidcommunity.com/gingerbreak-root-for-gingerbread-app-20110421/nvdBroken Link
- www.androidpolice.com/2011/05/03/google-patches-gingerbreak-exploit-but-dont-worry-we-still-have-root-for-now/nvdPress/Media Coverage
- www.cisa.gov/known-exploited-vulnerabilities-catalognvdUS Government Resource
News mentions
0No linked articles in our index yet.