android_autorooter

Android Autorooter Esto es solo una nota mental, más que nada para explorar más a fondo las posibilidades del trabajo realizado aquí: https://rtx.meta.security/exploitation/2024/03/04/Android-run-as-forgery.html...

CVE-2026-43499-aristotle

CVE-2026-43499 — aristotle au/KDDI 小米 XIG04 针对搭载Android 12 的au/KDDI 小米 "aristotle" XIG04 的本地权限提升（tmp-root），利用CVE-2026-43499 。这是一个设备所有者root原始方法：用于root你自己的手机（例如，当开发者选项无法访问时重新启用ADB）。 这是上游实现的一个aristotle 移植 ：https://github.com/x-spy/CVE-2026-43499-popsicle —— 该实现针对小米17 / Pro / Ultra（popsicle，骁龙，Androi...

Chrome-Forensic_CVE-2024-0044

🔍 Chrome Forense - CVE-2024-0044 Una herramienta robusta de forense digital para extraer y analizar artefactos de Google Chrome desde dispositivos Android Características • Instalación • Uso • Documentación 👤 Información del Autor Autor: JackTekno GitHub: github.com/JackTekno 📋 Resumen Esta...

c-CVE-2024-0044

CVE 2024 0044 CVE-2024-0044 是在 PackageInstallerService.java 文件的 createSessionInternal 函数中发现的一个高严重性漏洞，影响 Android 12 和 13 版本。该漏洞允许攻击者执行 "以任意应用身份运行" 攻击，导致本地权限提升，无需用户交互。问题源于 createSessionInternal 函数中的不当输入验证。攻击者可以通过操纵会话创建过程来利用此漏洞，从而可能未经授权访问敏感数据并在受影响的设备上执行未授权操作。 该漏洞由 Meta 安全 发现 概念验证由 Tiny hack 总结并分享...

CVE-2024-0044

CVE 2024 0044 CVE-2024-0044，在 PackageInstallerService.java 文件的 createSessionInternal 函数中被发现，是一个影响 Android 12 和 13 的高严重性漏洞。该漏洞允许攻击者执行“以任意应用身份运行”攻击，导致本地权限提升，无需用户交互。问题源于 createSessionInternal 函数内的输入验证不当。攻击者可通过操纵会话创建过程利用此漏洞，可能获得对敏感数据的未授权访问，并在受影响设备上执行未授权操作​ 该漏洞由 Meta security 发现 概念验证由 Tiny hack 总结并分享...

CVE-2026-43499-aristotle-apk build-43

Aristotle ADB Enable A minimal Android app that turns on ADB on an au/KDDI Xiaomi "aristotle" XIG04, Android 12 whose developer options can't be reached, using a temporary root obtained from CVE-2026-43499. It is a device-owner tool in the same category as KingRoot: it roots your own phone to fli...

test-poc

CVE-2021-0928, writeToParcel/createFromParcel serialization...

CVE-2021-0976

In toBARK of floor0.c, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-12Android ID: A-199680600...

CVE-2021-0923

In createOrUpdate of Permission.java, there is a possible way to gain internal permissions due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:...

CVE-2021-0987

In getNeighboringCellInfo of PhoneInterfaceManager.java, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. This could lead to local information disclosure with no additional execution privileges needed. User...

CVE-2021-0978

In getSerialForPackage of DeviceIdentifiersPolicyService.java, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. This could lead to local information disclosure with no additional execution privileges needed...

CVE-2021-0996

In nfaHciCallback of HciEventManager.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure over NFC with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:...

CVE-2021-0925

In rwt4tsmdetectndef of rwt4t.cc, there is a possible out of bounds read due to an incorrect bounds check. This could lead to remote information disclosure due to a limited change in behavior based on the out of bounds data with no additional execution privileges needed. User interaction is not...

CVE-2021-0992

In onCreate of PaymentDefaultDialog.java, there is a possible way to change a default payment app without user consent due to tapjack overlay. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.Product:...

CVE-2021-0979

In isRequestPinItemSupported of ShortcutService.java, there is a possible cross-user leak of packages in which the default launcher supports requests to create pinned shortcuts due to a permissions bypass. This could lead to local information disclosure with no additional execution privileges...

CVE-2021-0799

In ActivityThread.java, there is a possible way to collide the content provider's authorities. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12Android ID: A-1976479...

CVE-2021-0997

In handleUpdateNetworkState of GnssNetworkConnectivityHandler.java , there is a possible APN disclosure due to log information disclosure. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product:...

CVE-2021-0971

In MPEG4Source::read of MPEG4Extractor.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10...

CVE-2021-0959

In jitmemoryregion.cc, there is a possible bypass of memory restrictions due to a logic error in the code. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12Android ID:...

CVE-2021-0977

In phNxpNHalDtaUpdate of phNxpNciHaldta.cc, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12Andro...