First published: Tue Feb 05 2013(Updated: )
The PowerVR SGX driver in Android before 2.3.6 allows attackers to obtain potentially sensitive information from kernel stack memory via an application that uses a crafted length parameter in a request to the pvrsrvkm device.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
Android | =2.2.3 | |
Android | =2.0.1 | |
Android | =1.0 | |
Android | =1.6 | |
Android | =2.1 | |
Android | =2.3.3 | |
Android | =2.0 | |
Android | =2.3.1 | |
Android | <=2.3.5 | |
Android | =1.5 | |
Android | =2.2.1 | |
Android | =2.2.2 | |
Android | =2.2 | |
Android | =2.3.4 | |
Android | =1.1 | |
Android | =2.3.2 | |
Android | =2.3 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2011-1350 has a medium severity level as it can expose sensitive information from kernel stack memory.
To mitigate CVE-2011-1350, update your Android device to version 2.3.6 or later.
CVE-2011-1350 affects users with Android versions ranging from 1.0 to 2.3.5.
CVE-2011-1350 allows attackers to obtain sensitive information through crafted requests to the pvrsrvkm device.
CVE-2011-1350 is not considered a remote vulnerability, as it requires a local application to exploit the flaw.