samsung-android-lpe

第一部分：任意AT命令执行 CVE-2026-20980 在解锁设备中切换连接模式后，应用处理器AP命令由 atdistributor 管理。 AT+SWATD=0 AT+ACTIVATE=0,0,0 AT+SWATD=1 atdistributor 通过函数 pacmcheckatcmds 验证AT命令 void mainint32t arg1, void arg2 noreturn int32t var21b0 = arg1; data42c170 = SignalHandler; sigemptyset0x42c178; ... if...

CVE-2023-38297

A vulnerability exists in the com.factory.mmigroup (version 2.1) component on various Android devices, including models from Samsung , T-Mobile , Boost Mobile , Realme , and Lenovo . Due to inadequate access control , local third-party apps can send broadcast Intents to com.factory.mmigroup/.MMIG...

CVE-2023-38297

An issue was discovered in a third-party com.factory.mmigroup component, shipped on devices from multiple device manufacturers. Certain software builds for various Android devices contain a vulnerable pre-installed app with a package name of com.factory.mmigroup versionCode='3', versionName='2.1...