ID:4319 - Exploit for Information disclosure in Google Android - CVE-2011-1350

 
Main Vulnerability Database Exploits ID:4319 - Exploit for Information disclosure in Google Android - CVE-2011-1350

ID:4319 - Exploit for Information disclosure in Google Android - CVE-2011-1350

Published: August 11, 2020


Vulnerability identifier: #VU43101
Vulnerability risk: Medium
CVE-ID: CVE-2011-1350
CWE-ID: CWE-200
Exploitation vector: Remote access
Vulnerable software:
Google Android

Link to public exploit:


Vulnerability description

The vulnerability allows a remote non-authenticated attacker to gain access to sensitive information.

The PowerVR SGX driver in Android before 2.3.6 allows attackers to obtain potentially sensitive information from kernel stack memory via an application that uses a crafted length parameter in a request to the pvrsrvkm device.


Remediation

Install update from vendor's website.