CVE-2015-1474_poc

Ce code est une tentative de proof of concept PoC pour CVE-2015-1474. Le code est basé sur celui de la commande screencap, mais génère un parcel malveillant qui fait planter le surfaceflinger lorsqu'il est désérialisé. Voir plus sur...

Exploit for Integer Overflow or Wraparound in Google Android

CVE-2025-48595 — Android Framework Integer Overflow Vulnerabil...

CVE-2025-48535

In assertSafeToStartCustomActivity of AppRestrictionsFragment.java , there is a possible way to exploit a parcel mismatch resulting in a launch anywhere vulnerability due to unsafe deserialization. This could lead to local escalation of privilege with no additional execution privileges needed. Us...

CVE-2021-0928

In createFromParcel of OutputConfiguration.java, there is a possible parcel serialization/deserialization mismatch due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for...

PT-2021-13358 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions Android-9 through Android-11 Description: The issue is related to a parcel serialization/deserialization mismatch in the createFromParcel method of OutputConfiguration.java due to improper input validation. This could lead to...