amazon-mustang-hack

AI 辅助项目。 本研究、漏洞利用开发及文档均借助 AI 辅助完成，使用了 GLM-5.3 和 DeepSeek V4.1 Flash 模型。 amazon-mustang-hack 针对 Amazon Fire 7 第 9 代（mustang，MT8163，Mali-T720） 最终固件——Fire OS 7.3.3.1，PS7331.4463N，内核 4.9.117（构建于 2025-05-03，SPL 2024-08-01） ——的 root 漏洞利用研究。 目标：LineageOS。该设备的引导加载程序路径已失效（bootrom 已修补——仅能通过 CMD 短接进入...

GhostLock

GhostLock 5.10 这是一个针对 Amazon Fire Max 11（sunstone）和 Fire TV Stick 4K Max 2nd Gen / 2023（karat）的内核 root 漏洞利用工具，改编自 CyberMeowfia 中的 CVE-2026-43499。 支持的设备 支持两款设备，均运行 Fire OS 8。每款设备都有各自的构建目标。 Fire Max 11（sunstone） Fire OS| 构建版本| 增量版本| 内核 ---|---|---|--- 8.3.3.8| RS8338.3339N| 0030132734852|...

EUVD-2018-3073

Malware in sbrugna...

EUVD-2020-20433

Malware in sbrugna...

EUVD-2018-3068

Malware in sbrugna...

EUVD-2015-7223

Malware in sbrugna...

EUVD-2019-16941

Malware in sbrugna...

CVE-2024-27350

Amazon Fire OS 7 before 7.6.6.9 and 8 before 8.1.0.3 allows Fire TV applications to establish local ADB Android Debug Bridge connections. NOTE: some third parties dispute whether this has security relevance, because an ADB connection is only possible after the non-default ADB Debugging option is...

CVE-2020-27940

This issue was addressed with improved file handling. This issue is fixed in Apple TV app for Fire OS 6.1.0.6A142:7.1.0. An attacker with file system access may modify scripts used by the app...

CVE-2019-15027

The MediaTek Embedded Multimedia Card eMMC subsystem for Android on MT65xx, MT66xx, and MT8163 SoC devices allows attackers to execute arbitrary commands as root via shell metacharacters in a filename under /data, because clearemmcnomediaentry in platform/mt6577/external/meta/emmc/metaclremmc.c...

CVE-2024-27350

Amazon Fire OS 7 before 7.6.6.9 and 8 before 8.1.0.3 allows Fire TV applications to establish local ADB Android Debug Bridge connections. NOTE: some third parties dispute whether this has security relevance, because an ADB connection is only possible after the non-default ADB Debugging option is...

Design/Logic Flaw

Amazon Fire OS 7 before 7.6.6.9 and 8 before 8.1.0.3 allows Fire TV applications to establish local ADB Android Debug Bridge connections. NOTE: some third parties dispute whether this has security relevance, because an ADB connection is only possible after the non-default ADB Debugging option is...

Amazon Fire OS Security Vulnerability

Amazon Fire OS is a suite of Android-based mobile operating systems developed by Amazon.com, Inc. that run on Amazon devices. A security vulnerability exists in Amazon Fire OS versions 7.x up to and including 7.6.6.9, and 8.x up to and including 8.1.0.3, which stems from a vulnerability that allo...

CVE-2024-27350

Amazon Fire OS 7 before 7.6.6.9 and 8 before 8.1.0.3 allows Fire TV applications to establish local ADB Android Debug Bridge connections. NOTE: some third parties dispute whether this has security relevance, because an ADB connection is only possible after the non-default ADB Debugging option is...

CVE-2024-27350

Amazon Fire OS 7 before 7.6.6.9 and 8 before 8.1.0.3 allows Fire TV applications to establish local ADB Android Debug Bridge connections. NOTE: some third parties dispute whether this has security relevance, because an ADB connection is only possible after the non-default ADB Debugging option is...

CVE-2024-27350

Summary: Amazon Fire OS versions 7.x and 8.x suffer a local ADB exposure that allows Fire TV apps to establish local ADB connections. This requires enabling the non-default ADB Debugging option and approving the connection prompt. Affected versions: Fire OS 7.0.0–7.6.6.8 (fixed in 7.6.6.9 or late...

CVE-2020-27940

This issue was addressed with improved file handling. This issue is fixed in Apple TV app for Fire OS 6.1.0.6A142:7.1.0. An attacker with file system access may modify scripts used by the app...

CVE-2020-27940

This issue was addressed with improved file handling. This issue is fixed in Apple TV app for Fire OS 6.1.0.6A142:7.1.0. An attacker with file system access may modify scripts used by the app...

Design/Logic Flaw

This issue was addressed with improved file handling. This issue is fixed in Apple TV app for Fire OS 6.1.0.6A142:7.1.0. An attacker with file system access may modify scripts used by the app...

CVE-2020-27940

The CVE-2020-27940 issue affects the Apple TV app for Fire OS, where an attacker with file system access could modify scripts used by the app due to improper file handling. The vulnerability is addressed by improvements in file handling and is fixed in Apple TV app for Fire OS 6.1.0.6A142:7.1.0. ...