CVE-2023-6241

CVE-2023-6241 漏洞利用 相关技术文章可在此处查看。这是 Arm Mali 内核驱动程序中的一个漏洞，我于 2023 年 11 月报告了该漏洞。该漏洞可用于从不被信任的应用域获取任意内核代码执行权限，进而用于禁用 SELinux 并获取 root 权限。 该漏洞利用已在搭载 2023 年 11 月补丁（UD1A.231105.004）的 Google Pixel 8 上完成测试。它需要使用 OpenCL 编译，并与 OpenCL 库 libGLESmali.so 链接。该库可在 Pixel 8 设备的 vendor/lib64/egl/libGLESmali.so...

CVE-2023-6241-Pixel7_Adaptation

CVE-2023-6241 для Google Pixel 7 Этот репозиторий покажет, как адаптировать эксплойт, опубликованный securitylab в его GitHub-репозитории, работающий для Google Pixel 8, под Google Pixel 7. Перед началом модификации эксплойта предположение о том, что исходный эксплойт также работает для устройств...

cve-2019-2215

CVE-2019-2215 CVE-2019-2215를 통한 Pixel 2 및 Pixel 2 XL용 Temproot Google Project Zero의 Jann Horn 및 Maddie Stone의 개념 증명 기반 개요 커널 메모리 읽기/쓰기 전용 권한 상승 공격을 시연하여 임시 루트 셸을 얻습니다. 이 도구는 2019년 9월 QP1A.190711.020 이미지와 커널 버전-BuildID 4.4.177-g83bee1dc48e8을 실행하는 Google Pixel 2/Pixel 2 XL walleye/taimen 기기에서 작동합니다...

Pixel_GPU_Exploit

Mali GPU 커널 LPE 이 글은 구글에 독립적으로 식별하여 보고한, 기본 애플리케이션 샌드박스에서 접근 가능한 Mali GPU 내의 두 가지 커널 취약점에 대한 심층 분석을 제공합니다. 임의의 커널 읽기/쓰기 기능을 달성하는 커널 익스플로잇을 포함합니다. 결과적으로, SELinux를 비활성화하고 다음 Android 14 버전을 실행하는 Google Pixel 7 및 8 Pro 모델에서 root 권한을 상승시킵니다: Pixel 8 Pro:...

CVE-2022-46395

Exploit für CVE-2022-46395 Der Write-up ist hier zu finden. Dies ist ein Fehler im Arm-Mali-Kernel-Treiber, den ich im November 2022 gemeldet habe. Der Fehler kann genutzt werden, um aus der nicht vertrauenswürdigen App-Domäne beliebigen Kernel-Code auszuführen, der dann verwendet wird, um SELinu...

Google Pixel 安全漏洞

The Google Pixel is a smartphone produced by Google Inc. The Google Pixel has a security vulnerability. This vulnerability stems from an improper input validation in the hypalloc function located in arch/arm64/kvm/hyp/nvhe/alloc.c. This can lead to out-of-bound writes due to inadequate input...

Google Pixel 安全漏洞

The Google Pixel is a smartphone produced by Google Inc. The Google Pixel has a security vulnerability, which stems from a failed precondition check in dhdtcpdatainfoget within dhdip.c, potentially leading to remote denial of service attacks...

Google Pixel 安全漏洞

The Google Pixel is a smartphone produced by Google Inc. The Google Pixel has a security vulnerability, which stems from memory corruption in the MMDATAIND component of cnNrSmMsgHdlrFromMM.cpp. This vulnerability may lead to remote privilege escalation...

Google Pixel 安全漏洞

The Google Pixel is a smartphone produced by Google Inc. The Google Pixel has a security vulnerability, which stems from out-of-bounds writes due to the lack of bounds checks. This vulnerability may lead to an increase in local privileges...

Google Pixel 安全漏洞

The Google Pixel is a smartphone produced by Google Inc. The Google Pixel has a security vulnerability. This vulnerability stems from the lack of boundary checks in the DeviceId function within DeviceId.java, which results in persistent data synchronization issues. This may lead to an increase in...

Google Pixel 安全漏洞

The Google Pixel is a smartphone produced by Google Inc. The Google Pixel has a security vulnerability. This vulnerability stems from an obfuscation issue in the gmcddrhandlembamrreq function within the gmcmbaddr.c file, which may lead to an increase in local privileges...

Google Pixel 安全漏洞

The Google Pixel is a smartphone produced by Google Inc. The Google Pixel has a security vulnerability, which stems from a race condition in the vpuopeninst function in vpuioctl.c. This race condition leads to the reuse of resources after release, potentially allowing for local privilege escalati...

Google Pixel 安全漏洞

The Google Pixel is a smartphone produced by Google Inc. The Google Pixel has a security vulnerability, which stems from improper configuration of PowerVR GPU register protections, potentially leading to the leakage of local information...

Google Pixel 安全漏洞

The Google Pixel is a smartphone produced by Google Inc. The Google Pixel has a security vulnerability, which stems from incorrect boundary checks in the mfcdecv4l2.c file’s mfcdecdqbuf function. This improper boundary checking allows for out-of-bounds writes, potentially leading to an increase i...

Google Pixel 安全漏洞

The Google Pixel is a smartphone produced by Google Inc. The Google Pixel has a security vulnerability, which stems from a race condition that leads to the reuse of a read operation after deallocation, potentially resulting in the disclosure of local information...

Google Pixel 安全漏洞

The Google Pixel is a smartphone produced by Google Inc. The Google Pixel has a security vulnerability, which stems from incorrect boundary checking in the nsSmscbUtilities.c file’s nsGetUserData function. This improper boundary checking allows for out-of-bounds writes, potentially leading to...

Google Pixel 安全漏洞

The Google Pixel is a smartphone produced by Google Inc. The Google Pixel has a security vulnerability, which stems from memory corruption that leads to out-of-bound writes, potentially allowing for remote code execution...

Google Pixel 安全漏洞

The Google Pixel is a smartphone produced by Google Inc. The Google Pixel has a security vulnerability, which stems from the lack of boundary checks in the EfwApTransport::ProcessRxRing function, leading to out-of-bound writing and potentially allowing for local privilege escalation...

Google Pixel 安全漏洞

The Google Pixel is a smartphone produced by Google Inc. The Google Pixel has a security vulnerability, which stems from an off-by-one rule in the mfccoreisr.c file, where the mfchandlereleasedbuf variable lacks boundary checks, allowing for out-of-bounds writes and potentially enabling remote co...

Google Pixel 安全漏洞

The Google Pixel is a smartphone produced by Google Inc. The Google Pixel has a security vulnerability, which stems from incorrect bounds checking, leading to out-of-bounds write-ups and potentially allowing for remote code execution...