CVE-2017-0505-mtk

Este repositorio nao tem um README...

CVE-2020-0069_poc

Descrizione Questo repository contiene i materiali che abbiamo utilizzato per investigare la CVE-2020-0069 su uno Xiaomi Redmi 6a con un SoC Mediatek MT6762M. Ci sono tre programmi: kernelrw.c un programma C che consente di leggere/scrivere la memoria del kernel poc.sh uno script di shell...

mtk-su-reverse-cve-2020-0069

mtk-su nur einige meiner Notizen Stringtabelle Hole die dekomprimierte Stringtabelle mit binwalk -Xe stringtabledump Dump von der Adresse in der idb 0x1F098 komprimierte Größe: 1260 falls du die idb möchtest, öffne ein Issue mit deiner E-Mail und ich sende sie dir. Es ist ein guter Ausgangspunkt,...

mtk_su

MTK SU MTK SU è un LPE per CVE-2020-0069. Questo exploit è stato testato su un TCL LX A502DL con un SoC MediaTek MT6739 con Android 8.1.0. Compilazione root@kitploit: mkdir build cd build export ANDROIDNDK= cmake -DCMAKETOOLCHAINFILE="$ANDROIDNDK?/build/cmake/android.toolchain.cmake"...

AutomatedRoot

AutomatedRoot mtk-su एक्सप्लॉइट CVE-2020-0069 का उपयोग करके MediaTek उपकरणों को रूट करें। आवश्यकताएँ Python 3.9 या नया Windows के लिए %PATH% में। ADB Windows के लिए %PATH% में। CVE-2020-0069 PoC mtk-su। उपयोग mtk-su बाइनरी को MediaTek के SU XDA पेज से डाउनलोड करें और उन्हें संबंधित फ़ोल्डरों...

pwnage24mtk

pwnage24mtk Zertifikats-Exploit für MTK-Geräte.Es gibt einen Logikfehler im MTK-Zertifikatsüberprüfungsprozess.Ähnlich wie CVE-2023-20696. Gefixt. CVE-2023-20696 CVE-2025-20730 Es gibt einige Probleme mit der Architekturerkennung.Müssen behoben werden, wenn ich Zeit habe.Oder jemand kann einen...

ghidra-mtk-loader

Loader md1img di MediaTek per Ghidra Loader Ghidra per il formato immagine firmware modem md1img di MediaTek. Attualmente è supportato solo il firmware basato su nanoMIPS, ma le funzionalità di base potrebbero comunque funzionare se si sceglie manualmente un'architettura diversa ad es. MIPS duran...

pwnage24mtk

pwnage24mtk Exploit de certificado para dispositivos MTK. Há uma falha lógica no processo de verificação de certificados da MTK. Semelhante à CVE-2023-20696. Pode ser corrigido em junho. Aviso Este projeto é usado apenas para pesquisa. Certifique-se de obter autorização antes de usá-lo. Não é...

Linux Distros Unpatched Vulnerability : CVE-2026-72486

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - mailbox: mtk-adsp: fix UAF during device teardown When the SOF audio driver fails to initialize e.g. firmware boot timeout, its devres unwind frees the sndsofde...

CVE-2026-72486

A flaw was found in the Linux kernel's mtk-adsp mailbox driver. During device teardown, if the Sound Open Firmware SOF audio driver fails to initialize, a timing issue can occur where an interrupt is processed after the associated memory has been released. This Use-After-Free UAF vulnerability ca...

The vulnerability of the mtk-mdp component in the Linux operating system’s kernel allows a hacker to cause a service failure.

The vulnerability of the mtk-mdp component in the Linux operating system is related to errors during the update of the link counters. Exploiting this vulnerability can allow an attacker to cause a service failure...

CVE-2026-72486

In the Linux kernel, the following vulnerability has been resolved: mailbox: mtk-adsp: fix UAF during device teardown When the SOF audio driver fails to initialize e.g. firmware boot timeout, its devres unwind frees the sndsofdev object that the mailbox client mtk-adsp-ipc reaches via...

CVE-2026-72486

In the Linux kernel, the following vulnerability has been resolved: mailbox: mtk-adsp: fix UAF during device teardown When the SOF audio driver fails to initialize e.g. firmware boot timeout, its devres unwind frees the sndsofdev object that the mailbox client mtk-adsp-ipc reaches via...

UBUNTU-CVE-2026-72486

In the Linux kernel, the following vulnerability has been resolved: mailbox: mtk-adsp: fix UAF during device teardown When the SOF audio driver fails to initialize e.g. firmware boot timeout, its devres unwind frees the sndsofdev object that the mailbox client mtk-adsp-ipc reaches via...

CVE-2026-72486 mailbox: mtk-adsp: fix UAF during device teardown

In the Linux kernel, the following vulnerability has been resolved: mailbox: mtk-adsp: fix UAF during device teardown When the SOF audio driver fails to initialize e.g. firmware boot timeout, its devres unwind frees the sndsofdev object that the mailbox client mtk-adsp-ipc reaches via...

CVE-2026-72486

The CVE-2026-72486 entry concerns the Linux kernel mailbox for the mtk-adsp (SOF audio) where a use-after-free (UAF) can occur during device teardown. When the SOF driver fails to initialize (e.g., firmware boot timeout), devres unwinds and frees snd_sof_dev, while the mtk_adsp_mailbox shutdown c...

CVE-2026-72486 mailbox: mtk-adsp: fix UAF during device teardown

In the Linux kernel, the following vulnerability has been resolved: mailbox: mtk-adsp: fix UAF during device teardown When the SOF audio driver fails to initialize e.g. firmware boot timeout, its devres unwind frees the sndsofdev object that the mailbox client mtk-adsp-ipc reaches via...

EUVD-2026-59385

In the Linux kernel, the following vulnerability has been resolved: mailbox: mtk-adsp: fix UAF during device teardown When the SOF audio driver fails to initialize e.g. firmware boot timeout, its devres unwind frees the sndsofdev object that the mailbox client mtk-adsp-ipc reaches via...

PT-2026-72674

In the Linux kernel, the following vulnerability has been resolved: mailbox: mtk-adsp: fix UAF during device teardown When the SOF audio driver fails to initialize e.g. firmware boot timeout, its devres unwind frees the snd sof dev object that the mailbox client mtk-adsp-ipc reaches via chan-cl-r...

Astra Linux – Vulnerability found in Linux 6.12, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: media: mtk-mdp: A reference leak bug was fixed in mtkmdpremove. In mtkmdpprobe, vpugetplatdevice increases the reference count of the returned platform device. Add platformdeviceput to prevent the reference leak...