ghidra-nanomips

ghidra-nanomips nanoMIPS module for Ghidra. Setup Build root@kitploit: $ ./gradlew -PGHIDRAINSTALLDIR=/opt/ghidra11.0.3 Install The Gradle build task creates a ZIP file in the dist directory. Install it with File Install Extensions in the main Ghidra project window. Reference Material "MIPS...

CVE-2026-43499-aristotle

CVE-2026-43499 — aristotle au/KDDI Xiaomi XIG04 au/KDDI Xiaomi "aristotle" XIG04 向けのローカル権限昇格 tmp-root を、Android 12 上で CVE-2026-43499 により実現します。これはデバイスオーナーを利用したルート化プリミティブであり、自分の端末をルート化します（例: 開発者オプションに到達できない場合に ADB を再び有効化するなど）。 これは、上流実装の aristotle ポート です:...

AutomatedRoot

AutomatedRoot Root dei dispositivi MediaTek utilizzando l'exploit mtk-su CVE-2020-0069. Requisiti Python 3.9 o superiorein %PATH% per Windows. ADB in %PATH% per Windows. Il PoC CVE-2020-0069 mtk-su. Utilizzo Scarica i binari di mtk-su dalla pagina XDA di MediaTek SU e spostali nelle cartelle...

CVE-2020-0069_poc

Descrizione Questo repository contiene i materiali che abbiamo utilizzato per investigare la CVE-2020-0069 su uno Xiaomi Redmi 6a con un SoC Mediatek MT6762M. Ci sono tre programmi: kernelrw.c un programma C che consente di leggere/scrivere la memoria del kernel poc.sh uno script di shell...

mtkclient

Sprache: 🇺🇸 🇨🇳 MTKClient Nur ein MTK-Tool für Exploitation, Lesen/Schreiben von Flash und verrückte Dinge. Für Windows musst du den Standard-MTK-Port und den USBDK-Treiber installieren siehe Anleitung unten. Für Linux wird ein gepatchter Kernel nur benötigt, wenn du altes Kamakiri verwendest siehe...

FirmWire

root@kitploit: -. .-. | |+ \ \ / /+ .-. .- \ / \ | | | | '| ' \ // / | | '/ - / \ / '-' '-|| | || |||// | || |-' '-' FirmWire FirmWire è una piattaforma di analisi del firmware baseband a livello di sistema completo che supporta Samsung e MediaTek. Consente l'esecuzione di fuzzing, analisi...

cve-2023-20768

CVE-2023-20768 sul Samsung Galaxy M32 — uno studio di raggiungibilità Sommario. CVE-2023-20768 è una type confusion CWE-843 nell'allocatore ION di MediaTek. Ho verificato se sia effettivamente sfruttabile su un Samsung SM-M325F Galaxy M32, Helio G80 con il firmware di luglio 2022. Il codice...

CVE-2024-20154

CVE-2024-20154: NB-IoT SIB1-NB Stack Overflow im MediaTek MT6769 Baseband Classification: CWE-121 — Stack-basierter Pufferüberlauf Severity: Kritisch MediaTek Bulletin · 8.8 Hoch, Angriffsvektor: Angrenzend CISA-ADP Type: Remote Code Execution — keine Benutzerinteraktion, keine vorherige Verbindu...

mtk_su

MTK SU MTK SU è un LPE per CVE-2020-0069. Questo exploit è stato testato su un TCL LX A502DL con un SoC MediaTek MT6739 con Android 8.1.0. Compilazione root@kitploit: mkdir build cd build export ANDROIDNDK= cmake -DCMAKETOOLCHAINFILE="$ANDROIDNDK?/build/cmake/android.toolchain.cmake"...

mediatek-wlan-heap-overflow-cve-2026-20452-filogic-router-rce

CVE-2026-20452 — MediaTek WLAN AP Heap Overflow PoC Prova di concetto per CVE-2026-20452, un overflow del buffer heap nel driver WLAN Access Point di MediaTek. Vulnerabilità CVE : CVE-2026-20452 CVSS : 8.0 HIGH CWE : CWE-122 — Heap-based Buffer Overflow Sottocomponente : wlan driver AP Vettore...

GhostLock_MT6983V_5.10

GhostLockMT6983V5.10 Vulnerabilidade de alto risco CVE-2026-43499, implementação no kernel 5.10 e MediaTek MT6983V...

ghidra-mtk-loader

Loader md1img di MediaTek per Ghidra Loader Ghidra per il formato immagine firmware modem md1img di MediaTek. Attualmente è supportato solo il firmware basato su nanoMIPS, ma le funzionalità di base potrebbero comunque funzionare se si sceglie manualmente un'architettura diversa ad es. MIPS duran...

CVE-2024-20137

CVE-2024-20137 MediaTek SOCs MT6890, MT7622, MT7915, MT7916, MT7981, MT7986 के wlan ड्राइवर में कमजोरी का शोषण करने के लिए Python कोड MediaTek: https://corp.mediatek.com/product-security-bulletin/December-2024 NIST: https://nvd.nist.gov/vuln/detail/CVE-2024-20137 कोड के बारे में यह कोड Python 3 म...

CVE-2026-74323

A flaw was found in the MediaTek mt7996 Wi-Fi driver within the Linux kernel. When the mt7996txprepareskb routine fails to look up linkconf or linksta, it can lead to a memory leak by not releasing an already allocated transmission token. This issue could potentially impact system stability or...

CVE-2026-72260

A flaw was found in the Advanced Linux Sound Architecture ALSA System on Chip ASoC Mediatek MT8192 audio driver in the Linux kernel. During the device probe process, the driver fails to properly check the return value of a runtime power management PM function. If the runtime resume operation fail...

Linux Distros Unpatched Vulnerability : CVE-2026-72008

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - pmdomain: mediatek: Fix possible nullptr KP in HWV cleanup/on-check Should probe fail for HWVOTER type power domains, this driver was unconditionally trying to...

CVE-2026-72008

A flaw was found in the pmdomain: mediatek driver of the Linux kernel. This vulnerability occurs due to incorrect handling of Hardware Voter HWV type power domains during cleanup and power-on checks. Specifically, the driver might use inappropriate functions for checking power status and performi...

CVE-2026-72259

A flaw was found in the Linux kernel's ASoC Audio System on Chip Mediatek MT8192 audio driver. This vulnerability occurs because the driver fails to release reserved memory after a successful assignment during the probe process. This oversight can lead to a memory leak, potentially causing system...

CVE-2026-72062

In the Linux kernel, the following vulnerability has been resolved: gpio: mt7621: avoid corruption of shared interrupt trigger state The bank-shared fields like 'rising' and 'falling' are modified using non-atomic read-modify-write operations. Since every gpio chip instance represents an entire...

CVE-2026-72258

In the Linux kernel, the following vulnerability has been resolved: ASoC: mediatek: mt8183: Release reserved memory on cleanup The MT8183 AFE probe can assign reserved memory with ofreservedmemdeviceinit, but the assignment is never released on driver removal or later probe failures. Register a...