samsung-android-lpe

パート1: 任意のATコマンド実行 CVE-2026-20980 アプリケーションプロセッサAPのコマンドは、ロック解除されたデバイスで接続モードを切り替えた後、atdistributorによって管理されます。 root@kitploit: AT+SWATD=0 AT+ACTIVATE=0,0,0 AT+SWATD=1 atdistributor は、pacmcheckatcmds 関数を通じてATコマンドを検証します。 root@kitploit: void mainint32t arg1, void arg2 noreturn int32t var21b0 = arg1;...

CVE-2023-38297

CVE-2023-38297 affects the pre-installed com.factory.mmigroup app (version 2.1) on multiple Android devices. The component runs as the system user and exposes zero-permission capabilities to local apps, including arbitrary AT command execution, programmatic factory reset, IMEI/serial leakage, pow...

CVE-2023-38297

An issue was discovered in a third-party com.factory.mmigroup component, shipped on devices from multiple device manufacturers. Certain software builds for various Android devices contain a vulnerable pre-installed app with a package name of com.factory.mmigroup versionCode='3', versionName='2.1...