12 matches found
mtk-su-reverse-cve-2020-0069
mtk-su 只是我的一些笔记 字符串表 使用 binwalk -Xe stringtabledump 获取解压缩后的字符串表 从 idb 中的地址转储 0x1F098 压缩大小：1260 如果你想要 idb，请用你的邮箱提出一个问题，我会发送它。如果你想要重写漏洞利用，这是一个很好的起点。...
AutomatedRoot
AutomatedRoot 使用 mtk-su 漏洞 CVE-2020-0069 对 MediaTek 设备进行 Root。 要求 Python 3.9 或更新版本（在 Windows 中需加入 %PATH%）。 ADB（在 Windows 中需加入 %PATH%）。 CVE-2020-0069 的概念验证 mtk-su。 使用方法 从 MediaTek's SU XDA 页面 下载 mtk-su 二进制文件并将其放入相应文件夹（automatedroot/files/arm64）。 下载该工具的最新版本。 如果你使用 Windows，打开 PowerShell；如果使用...
mtk_su
MTK SU MTK SU 是针对 CVE-2020-0069 的本地权限提升利用程序。该漏洞利用已在运行 Android 8.1.0 且搭载 MediaTek MT6739 处理器（SoC）的 TCL LX A502DL 设备上测试通过。 构建 mkdir build cd build export ANDROIDNDK= cmake -DCMAKETOOLCHAINFILE="$ANDROIDNDK?/build/cmake/android.toolchain.cmake" -DANDROIDABI="armeabi-v7a" -DANDROIDPLATFORM=android-21...
Android Kernel Out-of-Bounds Write Vulnerability
Android Kernel bindertransaction of binder.c contains an out-of-bounds write vulnerability due to an incorrect bounds check that could allow for local privilege escalation. This vulnerability was observed chained with CVE-2019-2215 and CVE-2020-0069 under exploit chain "AbstractEmu."...
Android Kernel Use-After-Free Vulnerability
Android Kernel contains a use-after-free vulnerability in binder.c that allows for privilege escalation from an application to the Linux Kernel. This vulnerability was observed chained with CVE-2020-0041 and CVE-2020-0069 under exploit chain "AbstractEmu."...
Security Advisory - Privilege Escalation Vulnerability in Some Huawei Products
There is a privilege escalation vulnerability in the ioctl handlers of the Mediatek CMDQ driver. Local attackers can exploit this vulnerability to read and write to the system memory. Successful exploit may lead to local escalation of privilege. Vulnerability ID: HWPSIRT-2020-03106 This...
CVE-2020-0069
In the ioctl handlers of the Mediatek Command Queue driver, there is a possible out of bounds write due to insufficient input sanitization and missing SELinux restrictions. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not...
CVE-2020-0069
The CVE-2020-0069 issue affects MediaTek CMDQ driver ioctl handlers in Android kernel, where insufficient input sanitization and missing SELinux restrictions can cause an out-of-bounds write, enabling local privilege escalation without extra privileges or user interaction. Public material confirm...
CVE-2020-0069
In the ioctl handlers of the Mediatek Command Queue driver, there is a possible out of bounds write due to insufficient input sanitization and missing SELinux restrictions. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not...
CVE-2020-0069
In the ioctl handlers of the Mediatek Command Queue driver, there is a possible out of bounds write due to insufficient input sanitization and missing SELinux restrictions. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not...
CVE-2020-0069
creationtimestamp| type| source ---|---|--- 2020-03-03 06:33:39+00:00| exploited| https://t.me/androidMalware/710 2020-03-03 11:00:02+00:00| exploited| https://t.me/SecLabNews/7007 2020-03-04 07:16:40+00:00| exploited| https://t.me/informationsecuritychannel/35588 2020-03-24 16:08:58+00:00|...
