CVE-2011-3874

CVE-2011-3874 is a stack-based buffer overflow vulnerability in the libsysutils component of Android versions 2.2.x through 2.2.2 and 2.3.x through 2.3.6. This flaw allows user-assisted remote attackers to execute arbitrary code by tricking an application into calling the FrameworkListener::dispatchCommand method with an incorrect number of arguments. With a CVSS score of 9.3, this vulnerability is considered critical, indicating a network-based attack with medium complexity that can lead to complete compromise of confidentiality, integrity, and availability. While the zergRush exploit demonstrated a use-after-free error, there is no evidence of active exploitation, publicly available Metasploit or Nuclei modules, or significant community discussion or media coverage surrounding this CVE.