Lucene search
+L

1 matches found

Huntr
Huntr
•added 2023/10/08 2:24 p.m.•40 views

Root takeover via signature spoofing

Description When an app requests "CMDBECOMEMANAGER" via prctl, couple of checks done before promoting uid as root manager. Main check relies on requester's signature. Signature control is done in checkv2signature function in kernel\apksign.c, this function accepts both V2 and V3 signatures...

7.5CVSS7.1AI score0.00582EPSS
SaveExploits1References1
Rows per page
Query Builder