The PowerVR SGX driver in Android before 2.3.6 allows attackers to gain root privileges via an application that triggers kernel memory corruption using crafted user data to the pvrsrvkm device.Referenceshttp://code.google.com/p/android/issues/detail?id=21523http://jon.oberheide.org/files/levitator.c