ghostlock-oppo-watch3pro

GhostLock CVE-2026-43499 — OPPO Watch 3 Pro Complete Research Case Complete exploitation research on CVE-2026-43499 GhostLock, rtmutex/futex-PI stack UAF on the OPPO Watch 3 Pro OWW211, ColorOS Watch China version, Android 11, ARM32. Final conclusion: the chain-walk write mechanism crashes on...

CVE-2026-43499-aristotle

CVE-2026-43499 — aristotle au/KDDI Xiaomi XIG04 Local privilege escalation tmp-root for the au/KDDI Xiaomi "aristotle" XIG04 on Android 12 , via CVE-2026-43499. It is a device-owner rooting primitive: it roots your own phone e.g. to re-enable ADB when developer options are unreachable. This is an...

GhostLock-for-OnePlus15T

GhostLock — OnePlus 15T Kernel exploit targeting locked-bootloader OnePlus 15T devices. Uses CVE-2026-43499 to obtain root access without unlocking the bootloader or modifying boot.img. Authorized security research and educational purposes only. Modified from the originalGhostLock-for-OnePlus...

CVE-2026-43499-armv7

CVE-2026-43499 GhostLock — ARM32 Huawei Watch 4 Pro Linux kernel privilege escalation exploit attempt based on CVE-2026-43499 GhostLock — Huawei Watch 4 Pro MDS-AL00, armv7l Project Overview This project is a GhostLock kernel vulnerability exploit attempt targeting the Huawei Watch 4 Pro MDS-AL00...

UnPlus

unplus CVE-2026-43499 Futex PI UAF kernel arbitrary-address-write exploit core logic code, used to bypass SELinux and gain root. This repository only contains the core exploit logic source src/ and the single-binary packager wrapper/. src/target.h is a template ; you must fill in parameters for...

CVE-2026-43499-aristotle-apk

Aristotle ADB Enable A minimal Android app that turns on ADB on an au/KDDI Xiaomi "aristotle" XIG04, Android 12 whose developer options can't be reached, using a temporary root obtained from CVE-2026-43499. It is a device-owner tool in the same category as KingRoot: it roots your own phone to fli...

GhostLock-for-OnePlus

GhostLock — OnePlus Kernel exploit targeting locked-bootloader OnePlus devices. Uses CVE-2026-43499 to obtain root access without unlocking the bootloader or modifying boot.img. Authorized security research and educational purposes only. Table of Contents Vulnerability Overview Supported Devices...

iqoo-temp-root

vivo/iQOO Temporary Root Toolkit No bootloader unlocking, no flashing needed, temporary root lost on reboot. Core principle: CVE-2026-43499 futex PI UAF kernel exploit + temporary KernelSU loading. Supported devices App version Device| Codename| Payload ---|---|--- iQOO Z10 Turbo| z10t / iqooz10t...

GhostLock-GOT-W29

CVE-2026-43499 GhostLock — HUAWEI MatePad Pro 11 GOT-W29 针对 GOT-W29（HarmonyOS 4.0, kernel 4.19.157-perf+）上 CVE-2026-43499 （rtmutex/futex-PI 栈 UAF，"GhostLock"）的提权研究。 最终结论 1. 漏洞真实且可触发 ：值持有 PI 环使 FUTEXCMPREQUEUEPI 返回 -EDEADLK， 回滚路径激活 removewaiter 的 current != waiter-task 清理 bug（本内核...

Exploit for Use After Free in Linux Linux_Kernel

CVE-2026-43499 · Honor WIN RT AAK-AN00 Temporary Root Resear...

Exploit for Use After Free in Linux Linux_Kernel

GhostLock CVE-2026-43499 for the Galaxy S26 CVE-2026-43499...

GhostLock

GhostLock - CVE-2026-43499 Local Privilege Escalation Exploit Vulnerability Overview CVE ID: CVE-2026-43499 Vulnerability Type: futex PI priority inheritance stack UAF Use-After-Free Affected Range: Linux kernel 6.1 6.12 Android GKI Exploitation Impact: Local privilege escalation + SELinux disabl...

RootMyVivo-Exploit

RMV Exploit — чистая сборка CVE-2026-43499 для iQOO Neo 11 PD2520 Форк boxiaolanya2008/CVE-2026-43499-Neo11Plus, переработанный под RootMyVivo Neo: убрано всё, что не нужно нашему сценарию, оставлено проверенное ядро эксплойта без изменений таймингов. Что убрано от upstream Компонент| Причина...

Exploit for Use After Free in Linux Linux_Kernel

RMV Exploit — чистая сборка CVE-2026-43499 для iQOO Neo 11 PD...

ghostlock-custom

GhostLock Custom — CVE-2026-43499 Adaptation A GhostLock CVE-2026-43499 privilege escalation exploit targeting non-Android Linux 6.x ARM64 kernels. Kernel Characteristics Item| Value ---|--- Architecture| ARM64 AArch64 VABITS| 39 KIMAGETEXTBASE| 0xffffffc008000000 Kernel version| 6.x SELinux| Non...

CVE-2026-43499-pmg110-root

pmg110-root CVE-2026-43499 futex PI rtmutexwaiter use-after-free local privilege escalation, ported to the OPPO PMG110 / K15 Pro+ — MediaTek MT6991, ColorOS 16. One file pushed, run over LDPRELOAD: root@kitploit: adb push out/preload-pmg110-16.0.9.400.so /data/local/tmp/preload.so adb shell chmod...

root-s24-e1s

Root S24 e1s / S921BXXSDCZB2 Per-boot local root on Galaxy S24 SM-S921B firmware S921BXXSDCZB2 kernel 6.1.138-android14-11, then late-load KernelSU Next so com.rifsxd.ksunext reports Working LKM. Not affiliated with Root My Galaxy. No GitHub payload feed, no multi-device catalog. One firmware,...

ghostlock-cve-2026-43499

CVE-2026-43499 GhostLock — ARM32 Kernel Privilege Escalation Research Linux kernel futex PI rtmutex Use-After-Free vulnerability research and exploit development targeting Huawei Watch 4 Pro MDS-AL00 , Snapdragon SW5100, armv7l, kernel 5.4.210. Vulnerability removewaiter in kernel/locking/rtmutex...

Exploit for Use After Free in Linux Linux_Kernel

GhostLock for NVIDIA Shield TV Pro 9.2.4 Validated arm64 po...

ghostlock-k419-adapter

GhostLock — OnePlus Locked Bootloader Jailbreak Kernel exploit for OnePlus/OPPO/realme devices with locked bootloader. Achieves root + KernelSU installation without unlocking bootloader or modifying boot image. Runtime auto-detection of kernel version with multi-device offset table. Vulnerability...