NetSight
high7.1Public exploit code

CVE-2011-1350

The PowerVR SGX driver in Android before 2.3.6 allows attackers to obtain potentially sensitive information from kernel stack memory via an application that us…

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

The PowerVR SGX driver in Android before 2.3.6 allows attackers to obtain potentially sensitive information from kernel stack memory via an application that uses a crafted length parameter in a request to the pvrsrvkm device.

Affected products

VendorProductAffected versions
GoogleAndroid
through 2.3.5
Versions 1.0, 1.1, 1.5, 1.6, 2.0

Weakness classification

References