oppo-ghostlock

oppo-ghostlock GhostLock CVE-2026-43499 — OPPO Find N2 Linux Kernel Privilege Escalation Research Project Overview GhostLock CVE-2026-43499 is a kernel stack UAF vulnerability affecting Linux 2.6.39 through 7.1-rc1, triggered via a FUTEXCMPREQUEUEPI race condition. This project ports the x8664...

CVE-2026-43499_OPPO-MT6835

CyberMeowfia — GhostLock CVE-2026-43499 Research GhostLock : Linux Kernel futex PI Use-After-Free vulnerability, CVE-2026-43499. Attackers exploit PI-futex dependency loops to trigger a race condition, achieving local privilege escalation on kernels with CONFIGFUTEXPI=y. Target : OPPO PLS120 OP5E...

oppo-A5-PRO-5G-CVE-2026-43499

CVE-2026-43499 GhostLock — CVE-2026-43499 Vulnerability Adaptation Research Archive Device: OPPO PKP110 OP5DF3 · Kernel 6.1.134-android14-11-o · Android 16 SDK 36 Research period: 2026-08-20 2026-08-22 Final Conclusion CVE-2026-43499 exploitation chain cannot converge on 6.1 GKI + Android 14/15/1...

CVE-2025-10184_PoC

APK Build for CVE‑2025‑10184 PoC This is an APK Build for a PoC of CVE‑2025‑10184 The vulnerability exists in com..providers.telephony, allowing arbitrary applications to read SMS messages without SMS read permission Source Code The source code and more details can be found in Rapid7's article:...

CVE-2026-43499-pmg110-root

pmg110-root CVE-2026-43499 futex PI rtmutexwaiter use-after-free local privilege escalation, ported to the OPPO PMG110 / K15 Pro+ — MediaTek MT6991, ColorOS 16. One file pushed, run over LDPRELOAD: adb push out/preload-pmg110-16.0.9.400.so /data/local/tmp/preload.so adb shell chmod 644...

ghostlock-oppo-watch3pro

GhostLock CVE-2026-43499 — OPPO Watch 3 Pro Complete Research Case Complete exploitation research on CVE-2026-43499 GhostLock, rtmutex/futex-PI stack UAF on the OPPO Watch 3 Pro OWW211, ColorOS Watch China version, Android 11, ARM32. Final conclusion: the chain-walk write mechanism crashes on...

CVE-2026-43499_OPPO-MT6835

CVE-2026-43499 / GhostLock PoC for OPPO MT6835 This repository preserves a compact research snapshot for the GhostLock-style exploit chain targeting an OPPO MT6835-based device. Scope Exploit source tree under exploit Minimal proof-of-concept under poc Supporting analysis notes and build artifact...

GhostLock-OPPO-PCKM00

GhostLock — OPPO PCKM00 4.14.180 PoC CVE-2026-43499 GhostLock — Linux kernel futex priority-inheritance use-after-free local privilege escalation PoC, ported to the OPPO PCKM00 OP4A57, SM6150, Android 11, kernel 4.14.180-perf+. DISCLAIMER / 免责声明 This project is for authorized security research an...

CVE-2025-21479-FX5P

CVE-2025-21479 · OPPO Find X5 Pro PFEM00 temporary root RAM-only temp root for OPPO Find X5 Pro PFEM00 kernel 5.10.198-android12-9, ColorOS, locked bootloader via CVE-2025-21479 Adreno KGSL → KernelSU v3.3.0 LKM late-load. 中文：READMEzh.md Chain: KGSL physical R/W → disarm OEM guard, SELinux...

ColorOS-CVE-2025-10184

Information Source Vulnerability Principle & Solution Technical Analysis Vulnerability Details Type: Database injection attack 1=1 AND Impact: Any app can read SMS data. No permissions required, no user interaction, undetectable reading Affected: All SMS messages and verification codes on the...

ghostlock-pfem10

GhostLock — PFEM10 CVE-2026-43499 IonStack exploit for OPPO Find X5 Pro PFEM10. Kernel 5.10.236-android12-9-o, futex CMPREQUEUEPI UAF → pi-tree write primitive. Use at your own risk. Expect panics / reboots. Do not update firmware. Build ./build.sh requires Android NDK r28c Build params are fixed...

Exploit for Use After Free in Linux Linux_Kernel

GhostLock — OPPO Find X5 Pro PFEM10 English · 中文READ...

ghostlock-pfem10

GhostLock — OPPO Find X5 Pro PFEM10 English · 中文 GhostLock CVE-2026-43499 port for the OPPO Find X5 Pro on ColorOS 16. Reaches a uid=0 child process and a loaded kernelsu.ko; the root process is intercepted. Vulnerability CVE-2026-43499 — futex PI use-after-free. removewaiter clears...

Exploit for Use After Free in Linux Linux_Kernel

GhostLock — PFEM10 CVE-2026-43499 IonStack exploit for OP...

Exploit for Use After Free in Linux Linux_Kernel

GhostLock — OPPO PCKM00 4.14.180 PoC CVE-2026-43499 Ghos...

Exploit for Use After Free in Linux Linux_Kernel

CVE-2026-43499-pgp110 CVE-2026-43499 futex PI rtmutex...

Exploit for Use After Free in Linux Linux_Kernel

pmg110-root CVE-2026-43499 futex PI rtmutexwaiter use-af...

CVE-2026-22077

OPPO Wallet APP contains a trusted domain validation flaw that allows attackers to bypass protected interface access restrictions, which may lead to account token hijacking and sensitive information disclosure...

OPPO O+ Connect 安全漏洞

OPPO O+ Connect is a multi-device connectivity and data collaboration platform developed by OPPO Corporation in China. There is a security vulnerability in OPPO O+ Connect, which stems from the failure to verify the identity of the caller on the pipeline interface, potentially leading to an...

CVE-2026-22077

OPPO Wallet APP contains a trusted domain validation flaw that allows attackers to bypass protected interface access restrictions, which may lead to account token hijacking and sensitive information disclosure...