ARTist

ARTist - Android Runtime インストゥルメンテーションおよびセキュリティツールキット ARTist は、Android アプリおよび Java ミドルウェア向けの柔軟なオープンソースインストゥルメンテーションフレームワークです。Android Runtime（ART）のコンパイラに基づいており、デバイス上でのコンパイル中にコードを変更します。既存のインストゥルメンテーションフレームワークとは異なり、アプリケーションの元の署名を保持し、命令レベルで動作します。 このリポジトリは、ARTist...

ARTful

描述 ARTful 是一个原生 Android 库，允许开发者在 Android 13 和 14 上修改 Android 运行时（ART）。借助此工具，您可以动态更改应用程序或 Android Framework 中任何静态方法的实现，从而影响从应用程序内部调用的方法。这消除了使用明文引用 Android ClassLoader 来执行意外代码的需求，并通过完全移除方法交叉引用来阻碍逆向工程。 https://github.com/LaurieWired/ARTful/assets/123765654/67efa9cb-fd51-4d46-a7d9-7a48b38a19e4 用法...

Privilege Escalation of Poly Devices on the Android Platform

A local attacker who can execute code on the device could potentially escalate privileges through the Android Runtime vulnerability. HP has released updates to mitigate the potential vulnerabilities. HP has identified affected products with minimum versions that mitigate the potential...

CVE-2026-0133

In smmuattachdev of arm-smmu-v3.c, there is a possible way to sign malicious Android Runtime bootclass artifacts due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-0133

In smmuattachdev of arm-smmu-v3.c, there is a possible way to sign malicious Android Runtime bootclass artifacts due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

PT-2026-49792

In smmu attach dev of arm-smmu-v3.c, there is a possible way to sign malicious Android Runtime bootclass artifacts due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-0133: Undefined Security Weakness

In smmuattachdev of arm-smmu-v3.c, there is a possible way to sign malicious Android Runtime bootclass artifacts due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

Divide and conquer: how the new Keenadu backdoor exposed links between major Android botnets

In April 2025, we reported on a then-new iteration of the Triada backdoor that had compromised the firmware of counterfeit Android devices sold across major marketplaces. The malware was deployed to the system partitions and hooked into Zygote – the parent process for all Android apps – to infect...

Exploit for Incorrect Calculation in Google Android

CVE-2020-0022 Many thanks to Insinuator for their amazing blo...

EUVD-2016-7821

Malware in sbrugna...

EUVD-2016-7606

Malware in sbrugna...

EUVD-2015-3901

Malware in sbrugna...

EUVD-2017-1134

Malware in sbrugna...

Exploit for Use After Free in Google Android

CVE-2025-48543 Exploit: Android ART Use-After-Free Vulnerabili...

Linux Distros Unpatched Vulnerability : CVE-2016-6703

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A remote code execution vulnerability in an Android runtime library in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-11-...

The vulnerability of the ART (Android Runtime) environment of the Android operating system, which allows a hacker to increase their privileges

The vulnerability of the Android Runtime in the Android operating system is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to increase their privileges by bypassing the sandbox...

Android Runtime Use-After-Free Vulnerability

Android Runtime contains a use-after-free vulnerability potentially allowing a chrome sandbox escape leading to local privilege escalation...

Android Security Alert: Google Patches 120 Flaws, Including Two Zero-Days Under Attack

Google has shipped security updates to address 120 security flaws in its Android operating system as part of its monthly fixes for September 2025, including two issues that it said have been exploited in targeted attacks. The vulnerabilities are listed below - CVE-2025-38352 CVSS score: 7.4 - A...

Android Security Alert: Google Patches 120 Flaws, Including Two Zero-Days Under Attack

Google has shipped security updates to address 120 security flaws in its Android operating system as part of its monthly fixes for September 2025, including two issues that it said have been exploited in targeted attacks. The vulnerabilities are listed below - CVE-2025-38352 CVSS score: 7.4 - A...

Stable Channel Update for ChromeOS/ChromeOS Flex

ChromeOS M119 Stable The Stable channel is being updated to OS version: 15633.44.0 Browser version: 119.0.6045.158 for most ChromeOS devices. If you find new issues, please let us know one of the following ways 1. File a bug 2. Visit our ChromeOS communities 1. General: Chromebook Help Community ...