Root takeover via signature spoofing

Description When an app requests "CMDBECOMEMANAGER" via prctl, couple of checks done before promoting uid as root manager. Main check relies on requester's signature. Signature control is done in checkv2signature function in kernel\apksign.c, this function accepts both V2 and V3 signatures...

PT-2020-15057

Name of the Vulnerable Software and Affected Versions HUAWEI Mate 20 Pro smartphones versions earlier than 10.0.0.175C00E69R3P8 Description The issue is related to improper authentication. The software does not sufficiently validate the name of an apk file under certain conditions, which could...