CVE-2011-1350

The PowerVR SGX driver in Android before 2.3.6 allows attackers to obtain potentially sensitive information from kernel stack memory via an application that uses a crafted length parameter in a request to the pvrsrvkm device.

Score

CVSS 2.0 7.1 High

Status

Modified - cve@mitre.org

Published

2013-02-05

Last modified

2024-09-16

Weaknesses

CWE-200

Affected products

• Android (Google)

References

• http://code.google.com/p/android/issues/detail?id=21522
• http://jon.oberheide.org/files/levitator.c