CVE-2020-28343

creationtimestamp| type| source ---|---|--- 2021-02-01 16:17:01+00:00| published-proof-of-concept| https://t.me/linkersec/56 2022-06-07 23:34:30+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/2344...

An iOS hacker tries Android

Written by Brandon Azad, when working at Project Zero One of the amazing aspects of working at Project Zero is having the flexibility to direct my own research agenda. My prior work has almost exclusively focused on iOS exploitation, but back in August, I thought it could be interesting to try...

CVE-2020-28343

CVE-2020-28343 concerns Samsung Exynos NPU kernel driver vulnerabilities disclosed by Project Zero. The issue centers on unsanitized input in the NPU session parsing for /dev/vertex10, leading to two concrete primitives: (1) a heap overflow via a race on shared ION buffer memory_vector_cnt, allow...