CVE-2019-2215

CVE-2019-2215 다음 문제는 https://android.googlesource.com/kernel/msm의 android-msm-wahoo-4.4-pie 브랜치및 다른 브랜치에도 있을 수 있음에 존재합니다: binder 드라이버의 /drivers/android/binder.c에 있는 binderthread 구조체의 wait 멤버에 대한 use-after-free가 있습니다. 업스트림 커밋에 설명된 바와 같이: “binderpoll는 작업을 위해 sleep할 수 있는 thread-wait waitqueue를 전달합니다...

CVE-2023-20938-poc

CVE-2023-20938 — Android binder UAF 권한 상승 CVE-2023-20938 에 대한 로컬 권한 상승 개념 증명입니다. Android binder 드라이버의 use-after-free 취약점입니다. 권한이 없는 셸에서 uid 0 을 획득하고 SELinux를 permissive로 떨어뜨린 후 루트 셸을 실행합니다. 이 빌드의 대상: Android Cuttlefish / Goldfish AVD, x8664, 커널 5.10.107. ⚠️ 승인된 연구/교육 목적으로만 사용하세요. 자신의 테스트 장치 및...

android-kernel-exploitation-lab

Android 커널 익스플로잇 실습 이 실습은 binder 서브시스템의 중요한 Android 커널 취약점인 CVE-2019-2215를 탐색할 수 있는 환경을 설정하는 과정을 안내합니다. 문서 환경 설정 gdb 스크립트를 사용한 커널 권한 상승 syzkaller를 사용한 퍼징 AFL++를 사용한 퍼징 기술 세부 사항: CVE-2019-2215 이 취약점은 Android binder 드라이버의 use-after-free로, 다음과 같은 특징이 있습니다: 1. 근본 원인 : binder fd가 epoll 인스턴스에 추가된 후 스레드...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100507)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100507 advisory. In the Linux kernel, the following vulnerability has been resolved: binder: fix UAF in binderfreetransaction In binderfreetransaction, the t-toproc is read under the...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100538)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100538 advisory. In the Linux kernel, the following vulnerability has been resolved: binder: fix UAF in binderthreadrelease When a thread exits, binderthreadrelease walks its...

UBUNTU-CVE-2026-68458

In the Linux kernel, the following vulnerability has been resolved: binder: cache secctx size before release zeroes it bindertransaction bounds the scatter-gather buffer area with sgbufendoffset and subtracts the aligned LSM context size because the secctx is written at the tail of that area. The...

Exploit for Use After Free in Google Android

CVE-2023-20938 — Android binder UAF privilege escalation A lo...

The vulnerability of the Rust Binder driver for inter-process interaction in Linux kernel allows a hacker to trigger a service failure.

The vulnerability of the Rust Binder driver for inter-process interaction in Linux kernel relates to incorrect resource locking. Exploiting this vulnerability can allow an attacker to cause service failures...

EUVD-2021-27205

Malware in sbrugna...

EUVD-2017-4681

Malware in sbrugna...

EUVD-2024-30742

Malicious code in bioql PyPI...

CVE-2021-40015

There is a race condition vulnerability in the binder driver subsystem in the kernel.Successful exploitation of this vulnerability may affect kernel stability...

CVE-2024-32997

Race condition vulnerability in the binder driver module Impact: Successful exploitation of this vulnerability will affect availability...

Huawei EMUI/HarmonyOS Competitive Conditions Vulnerability

Huawei EMUI and Huawei HarmonyOS are both products of Huawei, a mobile operating system based on Android, and Huawei HarmonyOS, a distributed operating system developed by Huawei for the whole scenario, aiming at realizing intelligent interconnection and resource sharing among people, devices, an...

CVE-2024-32997

Race condition vulnerability in the binder driver module Impact: Successful exploitation of this vulnerability will affect availability...

CVE-2024-32997: Concurrent Execution using Shared Resource with Improper Synchronization

Race condition vulnerability in the binder driver module Impact: Successful exploitation of this vulnerability will affect availability...

Huawei HarmonyOS 安全漏洞

Huawei EMUI and Huawei HarmonyOS are both products of Huawei, a mobile operating system based on Android, and Huawei HarmonyOS, a distributed operating system developed by Huawei for the whole scenario, aiming at realizing intelligent interconnection and resource sharing among people, devices, an...

CVE-2024-32997

Race condition vulnerability in the binder driver module Impact: Successful exploitation of this vulnerability will affect availability...

CVE-2024-32997

CVE-2024-32997 describes a race-condition vulnerability in Huawei HarmonyOS’s binder driver module. Affected components include HarmonyOS and Huawei EMUI environments relying on the Binder driver. Impact is listed as availability loss upon successful exploitation. Connected documents corroborate ...

CVE-2024-32997

Race condition vulnerability in the binder driver module Impact: Successful exploitation of this vulnerability will affect availability...