ReparcelBug2

CVE-2021-0928, writeToParcel/createFromParcel serialization mismatch in android.hardware.camera2.params.OutputConfiguration This is exploit using that vulnerability for privilege escalation from installed Android app into Android Settings app or any other app installed app could send to declared ...

CVE-2017-13286

CVE-2017-13286 CVE-2017-13286 Pocno se puede usar Todos los recursos provienen de este artículo https://bbs.kanxue.com/thread-268506.htm La causa principal de esta vulnerabilidad es la inconsistencia de lectura/escritura del objeto Parcel, que se remonta al siguiente código public void...

test-poc

CVE-2021-0928, writeToParcel/createFromParcel serialization...

EUVD-2017-4803

Malware in sbrugna...

EUVD-2021-3547

Malicious code in bioql PyPI...

CVE-2021-0928

In createFromParcel of OutputConfiguration.java, there is a possible parcel serialization/deserialization mismatch due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for...

CVE-2021-0928

In createFromParcel of OutputConfiguration.java, there is a possible parcel serialization/deserialization mismatch due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for...

CVE-2021-0928

In createFromParcel of OutputConfiguration.java, there is a possible parcel serialization/deserialization mismatch due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for...

CVE-2021-0928

In createFromParcel of OutputConfiguration.java, there is a possible parcel serialization/deserialization mismatch due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for...

CVE-2021-0928

In createFromParcel of OutputConfiguration.java, there is a possible parcel serialization/deserialization mismatch due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for...

ASB-A-188675581

In createFromParcel of OutputConfiguration.java, there is a possible parcel serialization/deserialization mismatch due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

Google Android Local Elevation of Privilege Vulnerability (CNVD-2018-07851)

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA. An elevation vulnerability exists in the writeToParcel and readFromParcel of the OutputConfiguration.java file in Android versions 8.0 and 8.1. A local attacker can exploit this...