ReparcelBug

PoC del bug de desajuste de writeToParcel/createFromParcel en Android Consulta https://github.com/michalbednarski/IntentsLab/issues/2issuecomment-344365482 para la descripción del bug. Este repositorio contiene el PoC para CVE-2017-0806, que es un desajuste en la clase GateKeeperResponse...

CVE-2017-0806

An elevation of privilege vulnerability in the Android framework gatekeeperresponse. Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0. Android ID: A-62998805...

CVE-2017-0806

CVE-2017-0806 is an elevation of privilege in the Android framework (gatekeeperresponse). The Android bulletin and NVD entries list it as a local, user-interaction-required flaw that could enable a malicious local application to bypass user interaction requirements to gain additional permissions....