CVE-2011-1350

Severity: high (CVSS 7.1 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.1% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2013-02-05 · updated 2026-06-16
Weakness: CWE-200

Description

The PowerVR SGX driver in Android before 2.3.6 allows attackers to obtain potentially sensitive information from kernel stack memory via an application that uses a crafted length parameter in a request to the pvrsrvkm device.

Affected products

Android: through 2.3.5; 1.0, 1.1, 1.5, 1.6, 2.0, 2.0.1 (+10)

References

http://code.google.com/p/android/issues/detail?id=21522
http://jon.oberheide.org/files/levitator.c
http://code.google.com/p/android/issues/detail?id=21522
http://jon.oberheide.org/files/levitator.c

Get alerted when CVE-2011-1350 or the next vulnerability affects your stack