Buffer overflow in Google Android

CVE-2011-1352

The PowerVR SGX driver in Android before 2.3.6 allows attackers to gain root privileges via an application that triggers kernel memory corruption using crafted user data to the pvrsrvkm device.

Vulnerability class: Buffer Overflow

EPSS: 0.002 (14.8th percentile) — read the EPSS interpretation.

Affected products

Google Android — versions 1.0, 1.1, 1.5
N/a — versions n/a

Weakness classification (CWE)

CWE-119 — Improper Restriction of Operations within the Bounds of a Memory Buffer

References

cve@mitre.org (x_refsource_CONFIRM, Vendor Advisory)
cve@mitre.org (Exploit, x_refsource_MISC)