CVE-2011-1149

CVE-2011-1149 describes a privilege escalation vulnerability in Android versions prior to 2.3. This flaw allows local applications to bypass the application sandbox by improperly accessing the system property space, leveraging Android shared memory (ashmem) and ASHMEM_SET_PROT_MASK. With a CVSS score of 7.2, it is considered highly severe due to its low attack complexity and complete compromise of confidentiality, integrity, and availability. While exploit tools like psneuter and KillingInTheNameOf demonstrated its feasibility, there is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.