163 matches found
Wallbreak
Wallbreak 下载 APK 此应用演示了我在 Android 的 WallpaperManagerService 中发现的两个高严重性永久拒绝服务漏洞：CVE-2021-39670 和 CVE-2021-39690。 运行任意一个漏洞利用后，设备将持续反复崩溃并重启。 详细文章即将发布！ : CVE-2021-39670 “流利用” 利用 WallpaperManager 中的 setStream API，通过设置恶意的位图文件作为壁纸来耗尽设备内存。 似乎在不同厂商和设备版本之间具有很好的移植性。 补丁发布于 2022年5月 Android 安全公告。 通过 在...
CVE-2015-1474_poc
此代码旨在作为CVE-2015-1474的PoC尝试。 该代码基于screencap命令的代码，但生成一个恶意Parcel，当反序列化时会导致surfaceflinger崩溃。 更多信息请参考 http://forum.xda-developers.com/kindle-fire-hdx/orig-development/evaluating-cve-2015-1474-to-escalate-to-t3045163。 克隆至 frameworks/base/cmds/badscreencap，并使用 mmm frameworks/base/cmds/badscreencap 编译。...
CVE-2026-20511
In SurfaceFlinger, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11123860; Issue ID: MSV-8890...
EUVD-2026-72204
In SurfaceFlinger, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11123860; Issue ID: MSV-8890...
CVE-2026-20511
In SurfaceFlinger, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11123860; Issue ID: MSV-8890...
CVE-2026-20511
A memory corruption vulnerability exists in SurfaceFlinger caused by a use after free condition. This flaw could allow a malicious actor who has already obtained System privilege to achieve a local escalation of privilege . Exploitation does not require user interaction. Remediation is available ...
CVE-2026-20511
In SurfaceFlinger, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11123860; Issue ID: MSV-8890...
CVE-2026-20511: Use After Free
In SurfaceFlinger, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11123860; Issue ID: MSV-8890...
PT-2026-86606
In SurfaceFlinger, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11123860; Issue ID: MSV-8890...
CVE-2021-0332
In bootFinished of SurfaceFlinger.cpp, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-10Android ID:...
CVE-2019-2194
In SurfaceFlinger::createLayer of SurfaceFlinger.cpp, there is a possible arbitrary code execution due to improper casting. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:...
CVE-2024-34743
In setTransactionState of SurfaceFlinger.cpp, there is a possible way to perform tapjacking due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
EUVD-2016-4849
Malware in sbrugna...
EUVD-2017-0900
Malware in sbrugna...
EUVD-2020-1895
Malware in sbrugna...
EUVD-2017-0759
Malware in sbrugna...
EUVD-2020-1839
Malware in sbrugna...
EUVD-2020-1570
Malware in sbrugna...