CVE-2011-1149

Android before 2.3 does not properly restrict access to the system property space, which allows local applications to bypass the application sandbox and gain…

published April 21, 2011

CVSS
—
EPSS
0%
Percentile
23.6
In the wild
Unconfirmed
What it is

Android before 2.3 does not properly restrict access to the system property space, which allows local applications to bypass the application sandbox and gain privileges, as demonstrated by psneuter and KillingInTheNameOf, related to the use of Android shared memory (ashmem) and ASHMEM_SET_PROT_MASK.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00320 · 23.6th percentile
Published
2011-04-21T10:00Z
EPSS history
Timeline
  • 21 APR 10:00Z
    Android before 2.3 does not properly restrict access to the system property space, which allows local applications to bypass the application sandbox and gain…
    cvelistv5