CVE-2011-1350
Android < 2.3.6 - Information Exposure via PowerVR SGX Driver Request
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2011-1350. PoCs published by Geremy Condra.
AI-analyzed exploit summary This exploit leverages CVE-2011-1350 (info leak) and CVE-2011-1352 (kernel memory corruption) in the PowerVR SGX driver to escalate privileges on Android < 2.3.6. It dumps kernel memory, poisons dev_attr_ro pointers, and triggers a root shell via a sysfs attribute.
Description
The PowerVR SGX driver in Android before 2.3.6 allows attackers to obtain potentially sensitive information from kernel stack memory via an application that uses a crafted length parameter in a request to the pvrsrvkm device.
Exploits (1)
This exploit leverages CVE-2011-1350 (info leak) and CVE-2011-1352 (kernel memory corruption) in the PowerVR SGX driver to escalate privileges on Android < 2.3.6. It dumps kernel memory, poisons dev_attr_ro pointers, and triggers a root shell via a sysfs attribute.