CVE-2022-46395

Exploit for CVE-2022-46395 The write up can be found here. This is a bug in the Arm Mali kernel driver that I reported in November 2022. The bug can be used to gain arbitrary kernel code execution from the untrusted app domain, which is then used to disable SELinux and gain root. The exploit is...

vmlinux-to-elf

vmlinux-to-elf This tool allows to obtain a fully analyzable .ELF file from a vmlinux/vmlinuz/bzImage/zImage kernel image either a raw binary blob or a preexisting but stripped .ELF file, with recovered function and variable symbols. For this, it scans your kernel for a kernel symbol table...

Pixel_GPU_Exploit

Mali GPU Kernel LPE This article provides an in-depth analysis of two kernel vulnerabilities within the Mali GPU, reachable from the default application sandbox, which I independently identified and reported to Google. It includes a kernel exploit that achieves arbitrary kernel r/w capabilities...

cve-2019-2215

CVE-2019-2215 Temproot para Pixel 2 y Pixel 2 XL mediante CVE-2019-2215 Basado en una prueba de concepto de Jann Horn y Maddie Stone de Google Project Zero Resumen Demostración de un ataque de escalada de privilegios de solo lectura/escritura en memoria del kernel que resulta en un shell root...

CVE-2023-6241

Exploit for CVE-2023-6241 The write up can be found here. This is a bug in the Arm Mali kernel driver that I reported in November 2023. The bug can be used to gain arbitrary kernel code execution from the untrusted app domain, which is then used to disable SELinux and gain root. The exploit is...

Google Pixel owners urged to patch actively exploited modem flaw

Google has released its September 2026 Pixel Update Bulletin, fixing 110 vulnerabilities, including one that it says "may be under limited, targeted exploitation.” The bug is not described as a simple remote takeover, but as a vulnerability that could give an attacker who already has a foothold o...

Google Pixel Improper Authorization Vulnerability

Google Pixel devices contain an improper authorization vulnerability in the cellular modem. A logic error may allow an attacker to bypass permission checks and escalate privileges...

VulnCheck KEV: CVE-2026-58704

Google Pixel devices contain an improper authorization vulnerability in the cellular modem. A logic error may allow an attacker to bypass permission checks and escalate privileges...

📄 Google Pixel 10 Codec3P VPU fw_debug_buf Use-After-Free / Privilege Escalation

C proof of concept and vulnerability write-up for CVE-2026-0125 affecting the Google Pixel 10 Codec3P VPU driver. The issue is a race condition involving the fwdebugbuf pointer in the VPU kernel driver. The issue was fixed in the June 2026 Pixel Security Bulletin. Issue description There are...

Google Pixel remote code execution vulnerability (CNVD-2026-25583)

The Google Pixel is a Android smart device produced by Google, used for mobile communication and application execution. The Google Pixel has a remote code execution vulnerability. This vulnerability arises due to a lack of boundary checks in the modem component, allowing unauthorized writing beyo...

Google Pixel remote code execution vulnerability (CNVD-2026-25584)

The Google Pixel is an Android smart device produced by Google, used for mobile communication and application execution. The Google Pixel has a remote code execution vulnerability. This vulnerability arises due to memory corruption in the Modem component during the processing of SIP REFER request...

Google Pixel 安全漏洞

The Google Pixel is a smartphone produced by Google Inc. The Google Pixel has a security vulnerability, which stems from a failed precondition check in dhdtcpdatainfoget within dhdip.c, potentially leading to remote denial of service attacks...

Google Pixel 安全漏洞

The Google Pixel is a smartphone produced by Google Inc. The Google Pixel has a security vulnerability. This vulnerability stems from an improper input validation in the hypalloc function located in arch/arm64/kvm/hyp/nvhe/alloc.c. This can lead to out-of-bound writes due to inadequate input...

Google Pixel 安全漏洞

The Google Pixel is a smartphone produced by Google Inc. The Google Pixel has a security vulnerability, which stems from memory corruption in the MMDATAIND component of cnNrSmMsgHdlrFromMM.cpp. This vulnerability may lead to remote privilege escalation...

Google Pixel 安全漏洞

The Google Pixel is a smartphone produced by Google Inc. The Google Pixel has a security vulnerability, which stems from out-of-bounds writes due to the lack of bounds checks. This vulnerability may lead to an increase in local privileges...

Google Pixel 安全漏洞

The Google Pixel is a smartphone produced by Google Inc. The Google Pixel has a security vulnerability, which stems from incorrect boundary checks in the mfcdecv4l2.c file’s mfcdecdqbuf function. This improper boundary checking allows for out-of-bounds writes, potentially leading to an increase i...

Google Pixel 安全漏洞

The Google Pixel is a smartphone produced by Google Inc. The Google Pixel has a security vulnerability. This vulnerability stems from the lack of boundary checks in the DeviceId function within DeviceId.java, which results in persistent data synchronization issues. This may lead to an increase in...

Google Pixel 安全漏洞

The Google Pixel is a smartphone produced by Google Inc. The Google Pixel has a security vulnerability, which stems from incorrect boundary checking in the nsSmscbUtilities.c file’s nsGetUserData function. This improper boundary checking allows for out-of-bounds writes, potentially leading to...

Google Pixel 安全漏洞

The Google Pixel is a smartphone produced by Google Inc. The Google Pixel has a security vulnerability, which stems from a race condition in the vpuopeninst function in vpuioctl.c. This race condition leads to the reuse of resources after release, potentially allowing for local privilege escalati...

Google Pixel 安全漏洞

The Google Pixel is a smartphone produced by Google Inc. The Google Pixel has a security vulnerability. This vulnerability stems from an obfuscation issue in the gmcddrhandlembamrreq function within the gmcmbaddr.c file, which may lead to an increase in local privileges...