vivo_iqoo_neo_9_root_research_on_CVE-2025-21479

Neo9Root iQOO Neo9 PD2338C Unlock-Free Caps-Root Tool — Arbitrary physical-write privilege escalation based on CVE-2025-21479 Adreno GPU SDS No bootloader unlock, no flashing, no Magisk required. Achieves kernel-level arbitrary physical write through a GPU vulnerability; after patching key kernel...

qu1ckr00t

qu1ckr00t A PoC application demonstrating the power of an Android kernel arbitrary R/W CVE-2019-2215. Writeup: https://hernan.de/blog/2019/10/15/tailoring-cve-2019-2215-to-achieve-root/ Qu1ckR00t is a PROOF OF CONCEPT. It should NOT be used on your personal device with valuable userdata. It has...

CVE-2019-2215

CVE-2019-2215 Android Kernel Vulnerability CVE-2019-2215 temporary root PoC. It works on Google Pixel 2/Pixel 2 XL walleye/taimen devices running the September 2019 QP1A.190711.020 image with kernel version-BuildID 4.4.177-g83bee1dc48e8. Usage Now, Binary support arm64 only. $ git clone...

ghost-hoock

ghost-hoock A minimal fork of GhostLock that keeps only one primitive : turning off SELinux via CVE-2026-43499 futex PI UAF. ghost-hoock running on Samsung A17 -green Table of contents What is this How it works What was kept from the original What was removed Building Running Requirements...

CVE-2022-20607

CVE-2022-20607 In the Pixel cellular firmware, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with LTE authentication needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID:...

Exploiting-UAF-by-Ret2bpf-in-Android-Kernel-CVE-2021-0399-

This repository does not have a README...

CVE-2019-2215

CVE-2019-2215 CVE-2019-2215 POC for kernel 3.18 Based on Maddie Stone's POC from https://bugs.chromium.org/p/project-zero/issues/detail?id=1942 How to use: adb push su98 /data/local/tmp adb push su98-memory-kallsyms /data/local/tmp adb shell G8231:/ $ cd /data/local/tmp G8231:/ $ chmod 755...

CVE-2026-43499_OPPO-MT6835

CyberMeowfia — GhostLock CVE-2026-43499 Research GhostLock : Linux Kernel futex PI Use-After-Free vulnerability, CVE-2026-43499. Attackers exploit PI-futex dependency loops to trigger a race condition, achieving local privilege escalation on kernels with CONFIGFUTEXPI=y. Target : OPPO PLS120 OP5E...

CyberMeowfiaNS

CyberMeowfia Android Kernel Research This repository documents methods, tools, and case records for Android kernel sample analysis, following the CyberMeowfia research line. The two routes are CVE-2026-43499 and CVE-2026-43074. It is a proof-of-concept disclosure: how to judge root cause, bind...

Astra Linux – Vulnerability in Linux 5.10, Linux, Linux 5.15

In emulationprochandler of armv8deprecated.c, there is a potential way to corrupt memory due to a race condition. This could lead to a local escalation of privileges without the need for additional execution privileges. User interaction is not required for exploitation. Product: Android. Versions...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15

In the context of dm-verity-target.c, there is a potential way to modify read-only files due to a missing permission check. This could lead to a local escalation of privileges, as System execution privileges are required. User interaction is not necessary for exploiting this vulnerability. Produc...

Astra Linux – Vulnerability in Linux, Linux 5.10

In socksocknested of sock.c, there is a potential exploit after the free function due to a race condition. This could lead to a local escalation of privileges, as the execution privileges required by the system are involved. User interaction is not required for this exploitation. Product: Android...

android-kernel-exploitation

Exploitazione del Kernel Android Obiettivo L'obiettivo di questo workshop è iniziare con l'analisi delle vulnerabilità del kernel e lo sfruttamento nella piattaforma Android. Utilizzo Clona il repository git clone https://github.com/cloudfuzz/android-kernel-exploitation /workshop URL delle Github...

Certain HP LaserJet Enterprise and HP LaserJet Managed Printers – Potential Denial of Service

Certain HP LaserJet Enterprise and HP LaserJet Managed Printers may be potentially vulnerable to a Denial of Service due to race conditions when the Android kernel used by HP Workpath Applications is exploited. Disable Workpath Platform via the EWS or Fleet Management Tool...

ghostlock-pfem10

GhostLock — OPPO Find X5 Pro PFEM10 English · 中文 GhostLock CVE-2026-43499 port for the OPPO Find X5 Pro on ColorOS 16. Reaches a uid=0 child process and a loaded kernelsu.ko; the root process is intercepted. Vulnerability CVE-2026-43499 — futex PI use-after-free. removewaiter clears...

Astra Linux – Vulnerability in Linux, Linux 5.10

In the aiopollcompletework function of the aio.c file, there is a possibility of memory corruption due to use after free. This could lead to a local privilege escalation without the need for additional execution privileges. User interaction is not required for exploitation. Product: Android...

Astra Linux – Vulnerability in Linux 5.10, Linux

In bindervmaclose of binder.c, there is a potential exploit after the free function call due to improper locking. This could lead to a local escalation of privileges without the need for additional execution privileges. User interaction is not required for this exploitation. Product: Android...

Astra Linux – Vulnerability in Linux 5.10

In ioidentitycow of iouring.c, there is a potential way to corrupt memory due to a use after free. This could lead to a local escalation of privileges, as the exploit requires system execution privileges. User interaction is not required for exploitation. Product: Android Versions: Android kernel...

Astra Linux – Vulnerability in Linux 5.10, Linux

Product: Android Versions: Android kernel Android ID: A-224546354 References: Upstream kernel...

Astra Linux – Vulnerability in Linux

In hidinputchangeresolutionmultipliers of hid-input.c, there is a possible out-of-bounds write due to a heap buffer overflow. This could lead to a local privilege escalation without the need for additional execution privileges. User interaction is not required for exploitation. Product: Android...