CVE-2011-1352

Severity: medium (CVSS 6.9 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.2% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2013-02-05 · updated 2026-06-16
Weakness: CWE-119

Description

The PowerVR SGX driver in Android before 2.3.6 allows attackers to gain root privileges via an application that triggers kernel memory corruption using crafted user data to the pvrsrvkm device.

Affected products

Android: through 2.3.5; 1.0, 1.1, 1.5, 1.6, 2.0, 2.0.1 (+10)

References

http://code.google.com/p/android/issues/detail?id=21523
http://jon.oberheide.org/files/levitator.c
http://code.google.com/p/android/issues/detail?id=21523
http://jon.oberheide.org/files/levitator.c

Get alerted when CVE-2011-1352 or the next vulnerability affects your stack