CVE Feed

    Dashboard / CVE / CVE-2011-1823

    CVE-2011-1823

    The vold volume manager daemon on Android 3.0 and 2.x before 2.3.4 trusts messages that are received from a PF_NETLINK socket, which allows local users to execute arbitrary code and gain root privileges via a negative index that bypasses a maximum-only signed integer check in the DirectVolume::handlePartitionAdded method, which triggers memory corruption, as demonstrated by Gingerbreak.

    Published:Jun 9, 2011
    Last Modified:Apr 21, 2026
    EPS:Jun 9, 2011
    EPSS Score:0.38341
    CVSS Score:7.8

    CISA Notification

    Description

    The vold volume manager daemon on Android 3.0 and 2.x before 2.3.4 trusts messages that are received from a PF_NETLINK socket, which allows local users to execute arbitrary code and gain root privileges via a negative index that bypasses a maximum-only signed integer check in the DirectVolume::handlePartitionAdded method, which triggers memory corruption, as demonstrated by Gingerbreak.

    Required Action:

    Apply updates per vendor instructions.

    Notes:

    No extra notes provided.

    Due Date
    Sep 29, 2022
    1443 days ago
    Alert Date
    Sep 8, 2022
    1464 days ago

    Affected Products

    Vendor
    Google
    Product
    Android

    Exploits

    http://c-skills.blogspot.com/2011/04/yummy-yummy-gingerbreak.htmlhttp://forum.xda-developers.com/showthread.php?t=1044765http://xorl.wordpress.com/2011/04/28/android-vold-mpartminors-signedness-issue/http://c-skills.blogspot.com/2011/04/yummy-yummy-gingerbreak.htmlhttp://forum.xda-developers.com/showthread.php?t=1044765http://xorl.wordpress.com/2011/04/28/android-vold-mpartminors-signedness-issue/

    Common Weakness Enumeration

    CWE-190 Integer Overflow or Wraparound

    Common Attack Pattern Enumeration and Classification (CAPEC)

    CAPEC-92 Forced Integer Overflow

    Related CVEs

    CVE-2026-87583 (CVSS 5.4) — UI misrepresentation in Passwords in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attac…
    CVE-2026-87624 (CVSS 4.2) — UI misrepresentation in Passwords in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attac…
    CVE-2026-87597 (CVSS 4.8) — UI misrepresentation in CustomTabs in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote atta…
    CVE-2026-87565 (CVSS 6.5) — Information leak in Passwords in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker …
    CVE-2026-87463 (CVSS 4.8) — Incorrect authorization in Certificate in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote …
    CVE-2026-87483 (CVSS 6.5) — Incorrect authorization in Browser in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote atta…
    CVE-2026-87555 (CVSS 4.7) — Uninitialized resource in GPU in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker …
    CVE-2026-87486 (CVSS 4) — Clickjacking in TrustedWebActivities in Google Chrome on on Android prior to 153.0.8010.36 allowed a local att…
    CVE-2026-87643 (CVSS 9.6) — Integer overflow in GPU in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker to pot…
    CVE-2026-87534 (CVSS 9.8) — Missing authorization in WebView in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attack…

    References

    http://android.git.kernel.org/?p=platform/system/core.git%3Ba=commit%3Bh=b620a0b1c7ae486e979826200e8e441605b0a5d6
    http://android.git.kernel.org/?p=platform/system/netd.git%3Ba=commit%3Bh=79b579c92afc08ab12c0a5788d61f2dd2934836f
    http://android.git.kernel.org/?p=platform/system/vold.git%3Ba=commit%3Bh=c51920c82463b240e2be0430849837d6fdc5352e
    http://androidcommunity.com/gingerbreak-root-for-gingerbread-app-20110421/
    http://c-skills.blogspot.com/2011/04/yummy-yummy-gingerbreak.html
    http://forum.xda-developers.com/showthread.php?t=1044765
    http://www.androidpolice.com/2011/05/03/google-patches-gingerbreak-exploit-but-dont-worry-we-still-have-root-for-now/
    http://xorl.wordpress.com/2011/04/28/android-vold-mpartminors-signedness-issue/
    https://exchange.xforce.ibmcloud.com/vulnerabilities/67977
    http://android.git.kernel.org/?p=platform/system/core.git%3Ba=commit%3Bh=b620a0b1c7ae486e979826200e8e441605b0a5d6
    http://android.git.kernel.org/?p=platform/system/netd.git%3Ba=commit%3Bh=79b579c92afc08ab12c0a5788d61f2dd2934836f
    http://android.git.kernel.org/?p=platform/system/vold.git%3Ba=commit%3Bh=c51920c82463b240e2be0430849837d6fdc5352e
    http://androidcommunity.com/gingerbreak-root-for-gingerbread-app-20110421/
    http://c-skills.blogspot.com/2011/04/yummy-yummy-gingerbreak.html
    http://forum.xda-developers.com/showthread.php?t=1044765
    http://www.androidpolice.com/2011/05/03/google-patches-gingerbreak-exploit-but-dont-worry-we-still-have-root-for-now/
    http://xorl.wordpress.com/2011/04/28/android-vold-mpartminors-signedness-issue/
    https://exchange.xforce.ibmcloud.com/vulnerabilities/67977
    https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2011-1823

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High