samsung-android-lpe

第一部分：任意AT命令执行 CVE-2026-20980 在解锁设备中切换连接模式后，应用处理器AP命令由 atdistributor 管理。 root@kitploit: AT+SWATD=0 AT+ACTIVATE=0,0,0 AT+SWATD=1 atdistributor 通过函数 pacmcheckatcmds 验证AT命令 root@kitploit: void mainint32t arg1, void arg2 noreturn int32t var21b0 = arg1; data42c170 = SignalHandler; sigemptyset0x42c178;...

CVE-2023-38297

CVE-2023-38297 affects the pre-installed com.factory.mmigroup app (version 2.1) on multiple Android devices. The component runs as the system user and exposes zero-permission capabilities to local apps, including arbitrary AT command execution, programmatic factory reset, IMEI/serial leakage, pow...

CVE-2023-38297

An issue was discovered in a third-party com.factory.mmigroup component, shipped on devices from multiple device manufacturers. Certain software builds for various Android devices contain a vulnerable pre-installed app with a package name of com.factory.mmigroup versionCode='3', versionName='2.1...