CVE_2022_46395_Raven

Exploit para CVE-2022-46395 para ejecutar en FireTV 2nd gen Cube Este es un fork del Pixel 6 POC para CVE-2022-46395 del investigador de seguridad Man Yue Mo. Lee su análisis detallado de la vulnerabilidad aquí. Se han realizado cambios para tener en cuenta el espacio de usuario de 32 bits de...

CVE_2022_46395_Gazelle

用于在FireTV第三代Cube上运行的CVE-2022-46395利用程序 这是安全研究员 Man Yue Mo 的 Pixel 6 POC 针对 CVE-2022-46395 的一个分支。 阅读他的详细漏洞分析文章 这里。 已进行修改以适应 FireOS 的 32 位用户空间。该 POC 利用了 ARM Mali 内核驱动中的一个 bug，获取任意内核代码执行权限，然后用于禁用 SELinux 并获得 root 权限。 该利用程序已在 PS7664/3772（2023 年 9 月）中被修补。供参考，以下命令用于使用 ndk-21 中的 clang 编译： root@kitploit:...

cve-2022-46395-qemu

Laboratorio QEMU r36p0 para CVE-2022-46395 Este repositorio contiene un laboratorio QEMU/no-Mali para reproducir la condición desencadenante portable de CVE-2022-46395 contra la familia de controladores Arm Mali r36p0. El laboratorio está pensado para investigación local de vulnerabilidades y...

Exploit for Use After Free in Arm Avalon_Gpu_Kernel_Driver

CVE-2022-46395 QEMU r36p0 Lab This repository contains a QEMU...

Exploit for Use After Free in Arm Avalon_Gpu_Kernel_Driver

Exploit for CVE-2022-46395 The write up can be found here...

ARM Mali GPU Kernel Driver < r42p0 Use After Free (CVE-2022-46395)

The version of the Mali GPU Kernel Driver installed on the remote system is prior to r42p0 running on Midgard, Bifrost, Valhall or 5th Gen architecture. It is, therefore affected by a use-after-free error. A non-privileged user can make improper GPU processing operations to gain access to already...

Exploit for Use After Free in Arm Avalon_Gpu_Kernel_Driver

Exploit for CVE-2022-46395 to run on FireTV 2nd gen Cube Thi...

Exploit for Use After Free in Arm Avalon_Gpu_Kernel_Driver

Exploit for CVE-2022-46395 to run on FireTV 3rd gen Cube Thi...

CVE-2022-46395

CVE-2022-46395 concerns use-after-free in the Arm Mali GPU Kernel Driver. A non-privileged user can trigger improper GPU processing operations to access freed memory across Mali architectures: Midgard (r0p0–r32p0), Bifrost (r0p0–r41p0 before r42p0), Valhall (r19p0–r41p0 before r42p0), and Avalon ...