566 matches found
smt878u-ionstack-poc
smt878u-ionstack-poc Pure-C, host-assisted re-root proof of concept for Samsung Galaxy Tab S7 SM-T878U / gts7l against CVE-2026-43499 IonStack / GhostLock. The runtime chain uses native C/ELF components only. It does not require Python, Java, DEX, appprocess, or a JVM on the Android target. ADB i...
Root-My-Galaxy-Payloads
Root My Galaxy Payloads This repository contains the device-specific native side of Root My Galaxy: exact firmware profiles and offsets; the app-domain CVE-2026-43499 exploit source and compiled payload; the app bootstrap helper source; the verified KernelSU late-load build artifacts; the support...
Exploit for Write-what-where Condition in Linux Linux_Kernel
DirtyFrag-Galaxy 한국어 · English DirtyFragCVE-20...
CVE-2026-21045_and_CVE-2026-21048
CVE-2026-21045 & CVE-2026-21048 — Samsung libimagecodec.quram.so OOB Write PoC Overview This repository contains conceptual Proof-of-Concept PoC files that demonstrate out-of-bounds OOB write vulnerabilities in the Quramsoft image codec library libimagecodec.quram.so used on Samsung Android...
Root-My-Galaxy-S938B
Root My Galaxy — S938B Root My Galaxy is a firmware-profiled installer for temporary KernelSU root on supported Samsung builds. This fork is maintained for the Galaxy S25 Ultra SM-S938B running: Build: BP4A.251205.006.S938BXXSBCZG3 Kernel: 6.6.98-android15-8-pd6ff1cd-abogkiS938BXXSBCZG3-4k Downlo...
cve-2026-43499-m3q-azf1
GhostLock SELinux park — SM-S948U1 / AZF1 m3q Instantánea de investigación de un park de solo SELinux funcional para el Samsung Galaxy S26 Ultra SM-S948U1, nombre en clave m3q con el firmware S948U1UES3AZF1 GKI 6.12.30-android16-5. Este paquete no es un root completo. Cambia SELinux a Permissive ...
root-my-s24
RootMyS24 免解锁 root · Samsung Galaxy S24 系列（S9210 / S9260 / S9280）+ 国行 Z Fold6 基于内核漏洞 CVE-2026-43499 的安全研究项目 安全研究声明：本项目仅用于安全研究与自有设备维护。使用内核漏洞提权存在导致系统崩溃、数据丢失、设备变砖的风险，使用者需自行承担一切后果。请勿用于非法用途。 使用情况 以下为匿名聚合 统计（数据来自 App 内可选的运行日志共享）：不含 IP、城市或任何设备标识。 图表由项目服务器动态生成，随数据自动更新。 特性 免解锁 bootloader：不刷 BL、不升 rev...
IonStack-S22-cve-2026-43499
IonStack-S22-cve-2026-43499 MERGED WITH ORIGINAL REPO: Find it here https://github.com/CamsShaft/IonStack-S22 Full root in the kernel domain with selinux permissive on my SM-S901W S22 5.10.168-android12-9-27760517-abS901WVLS4DWL3. NOTES: I'm not going into great detail or lengths in this one sinc...
cve-2023-20768
CVE-2023-20768 on the Samsung Galaxy M32 — a reachability study Summary. CVE-2023-20768 is a type confusion CWE-843 in MediaTek's ION allocator. I checked whether it is actually exploitable on a Samsung SM-M325F Galaxy M32, Helio G80 running the July 2022 firmware. The vulnerable code is present,...
s26-m1q-ghostlock-selinux
S26 SM-S942U1 / m1q GhostLock CVE-2026-43499 — uid=0 root + KernelSU 激活达成 针对 Samsung Galaxy S26（SM-S942U1，codename m1q，SoC SM8850 骁龙 8 Elite Gen2， 内核 6.12.30-android16-5-android16-5-pd30ff70，Android 16）的 CVE-2026-43499（GhostLock）提权研究。 ✅ 最终结果：uid=0 root + KernelSU 激活达成 exploit 后通过 root helper 验证 $...
ghostlock-a17
GhostLock — CVE-2026-43499 on Samsung Galaxy A17 Full user-to-root exploit chain for CVE-2026-43499 "GhostLock" on the Samsung Galaxy A17 SM-A175F , running Android 16 / GKI 6.12. The chain starts from the public GhostLock primitives and ends with a usermode helper executing as: uid=0root gid=0ro...
Samsung-CVE-2025-21042
🔐 CVE-2025-21042 — Samsung Image Codec Remote Code Execution ⚙️ What it is A critical vulnerability in Samsung’s image-processing library libimagecodec.quram.so — used on Galaxy Android devices. 🧩 It’s an out-of-bounds write flaw triggered when parsing malicious image files like DNG. 📸 A crafted...
Root-My-Galaxy-Payloads
Root My Galaxy Payloads This repository contains the device-s...
Astra Linux – Vulnerability in Linux
A issue was discovered on Samsung Galaxy S3 i9305 4.4.4 devices. The WEP, WPA, WPA2, and WPA3 implementations accept second or subsequent broadcast fragments even when sent in plaintext and process them as fully unfragmented frames. An adversary can exploit this vulnerability to inject arbitrary...
Exploit for Use After Free in Linux Linux_Kernel
Root My Galaxy Payloads This repository contains the device-s...
Exploit for Use After Free in Linux Linux_Kernel
Galaxy A37 Root — CVE-2026-43499 Native payload for the Sam...
Exploit for Use After Free in Linux Linux_Kernel
root-s24-e1s Per-boot local root on Samsung Galaxy S24 SM-S...
Root-My-Galaxy-Payloads-Testing
Root My Galaxy Payloads This repository contains the device-s...