AbxOverflow

ここに記載された問題の修正は、CVE-2024-34740 / A-307288067 として公開されました： 掲示板 掲示板からリンクされたパッチ 他の2つのパッチ: 1 2 Android バイナリ XML Android systemserver 内では、多くのサービスが再起動をまたいだ状態を XML ファイルに保存しています $ adb shell su 0 find /data/system -name '.xml' | sort /data/system/appopsaccesses.xml /data/system/cachequota.xml...

TLPE

CVE-2026-49881 のPoCと解説 これはCVE-2026-49881のPoCおよび解説です。Android 17のTelecomサービスにおけるInCallControllerクラスのロジック上の問題で、特権のないアプリが追加のユーザー操作なしにUID 1000のsystemserverとして任意のコード実行を獲得できるものです。また、ここでは最新のAndroidバージョンでもsystemserverでのコード実行が永続化のために容易に適応できることを示します。...

CVE-2020-0082-ExternalVibration

CVE-2020-0082-PoC 이 저장소는 📱🚀👑⚡에 대한 개념 증명 코드로, Android 10에서 systemserver로의 로컬 권한 상승을 위한 역직렬화 취약점입니다. 이 개념 증명은 권한 있는 인텐트만 활성화합니다. root@kitploit: In ExternalVibration of ExternalVibration.java, there is a possible activation of an arbitrary intent due to unsafe deserialization. This could lead to loc...

PoCForCVE-2015-1528

このPoCは3つのパートに分かれています。 mediaserverフォルダは、通常のアプリケーションからmediaserverへコードを注入するのに役立ちます。 surfaceflingerフォルダは、mediaserverの権限を取得した後にsurfaceflingerへコードを注入するのに役立ちます。 systemserverフォルダは、surfaceflingerの権限を取得した後にsystemserverへコードを注入するのに役立ちます。 bbshellフォルダは、mediaserverにbusyboxを注入するのに役立ちます。...

Exploit for CVE-2026-49881

This is a PoC and a writeup for CVE-2026-49881, a logic issue in...

Exploit for Integer Overflow or Wraparound in Google Android

CVE-2025-48595 — Android Framework Integer Overflow Vulnerabil...

Exploit for XML Injection (aka Blind XPath Injection) in Google Android

!Screenshot of Android application with title AbxDroppedApk and...

EUVD-2016-2020

Malware in sbrugna...

EUVD-2019-10543

Malware in sbrugna...

EUVD-2017-14323

Malware in sbrugna...

CVE-2025-48543: Use After Free

In multiple locations, there is a possible way to escape chrome sandbox to attack android systemserver due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

ASB-A-307288067

In attributeBytesBase64 and attributeBytesHex of BinaryXmlSerializer.java, there is a possible arbitrary XML injection due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2023-40111

In setMediaButtonReceiver of MediaSessionRecord.java, there is a possible way to send a pending intent on behalf of systemserver due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation...

Code injection

In setMediaButtonReceiver of MediaSessionRecord.java, there is a possible way to send a pending intent on behalf of systemserver due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation...

CVE-2023-40111

In setMediaButtonReceiver of MediaSessionRecord.java, there is a possible way to send a pending intent on behalf of systemserver due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation...

ASB-A-272024837

In setMediaButtonReceiver of MediaSessionRecord.java, there is a possible way to send a pending intent on behalf of systemserver due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation...

ASB-A-214999987

In writeToParcel of SurfaceControl.cpp, there is a possible information disclosure due to uninitialized data. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

ASB-A-213169612

In BitmapcreateFromParcel of Bitmap.cpp, there is a possible arbitrary code execution due to a missing bounds check. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation...

ASB-A-168211968

In appendEventsToCacheLocked of SensorEventConnection.cpp, there is a possible out of bounds write due to a use-after-free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2020-0082

In ExternalVibration of ExternalVibration.java, there is a possible activation of an arbitrary intent due to unsafe deserialization. This could lead to local escalation of privilege to systemserver with no additional execution privileges needed. User interaction is not needed for...