CVE-2019-6340

CVE-2019-6340 For educational purposes only Run root@kitploit: $ docker run --rm -p 8080:80 knqyf263/cve-2019-6340 Exploit GET root@kitploit: $ curl -XGET -H "Content-Type: application/hal+json" "http://localhost:8080/node/1?format=haljson" -d ' "link": "value": "link", "options":...

CVE-2017-13253

CVE-2017-13253 PoC code for CVE-2017-13253. The full write-up is available here. Note that the numbers are a little bit different from the blog post, as I've found that there's a higher chance for a crash with a heap of 0x2000 of course if you run it enough times it should crash anyway. For...

hal

HALへようこそ！ HAL /hel/は、包括的なネットリストリバースエンジニアリングおよび操作フレームワークです。 Navigation 1. はじめに 2. ビルド手順 3. クイックスタートガイド 4. 学術的な文脈 はじめに HALって一体何？ 事実上、利用可能なネットリスト解析の研究はすべて、検査対象のネットリストをグラフベースで表現したものを基に動作しています。...

CVE-2026-57014

CVE-2026-57014 is an out-of-bounds write in the NFC HAL component (phNxpNciHal_ext_process_nfc_init_rsp in phNxpNciHal_ext.cc), caused by a missing bounds check. It affects Android (Pixel) devices and allows a local attacker with low privileges to achieve escalation of privilege with full impact ...

EUVD-2026-78993

In phNxpNciHalextprocessnfcinitrsp of phNxpNciHalext.cc, there is a possible out-of-bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2021-21551

PoC for CVE-2021-21551 Windows LPE using the Dell dbutil23.sys driver. Exploit approach Implement read/write, allocate shellcode, flip page to bypass smep, overwrite haldispatch ptr, execute shellcode...

CVE-2026-20514

In Audio HAL, there is a possible information disclosure due to a missing permission check. This could lead to local information disclosure if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11087632; Issue ID: MSV-8244...

CVE-2026-20513

In Audio HAL, there is a possible information disclosure due to improper input validation. This could lead to local information disclosure if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11087533; Issue ID: MSV-8245...

CVE-2026-20508

In Power HAL, there is a possible escalation of privilege due to type confusion. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11165543; Issue ID: MSV-9012...

CVE-2026-20509

In Power HAL, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11165543; Issue ID: MSV-9011...

CVE-2026-20512

In Audio HAL, there is a possible escalation of privilege due to improper input validation. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11087540; Issue ID: MSV-8246...

CVE-2026-20507

In Audio HAL, there is a possible escalation of privilege due to use after free. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11191981; Issue ID: MSV-9125...

CVE-2026-20506

In Audio HAL, there is a possible escalation of privilege due to use after free. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11191981; Issue ID: MSV-9126...

EUVD-2026-72207

In Audio HAL, there is a possible information disclosure due to a missing permission check. This could lead to local information disclosure if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11087632; Issue ID: MSV-8244...

CVE-2026-20514

CVE-2026-20514 affects MediaTek's Audio HAL , where a missing permission check can allow a local attacker with System privilege to disclose information without user interaction. The impact is limited to confidentiality (CVSS 3.1: 4.4, Medium). The vendor references Patch ID ALPS11087632 and Issue...

EUVD-2026-72206

In Audio HAL, there is a possible information disclosure due to improper input validation. This could lead to local information disclosure if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11087533; Issue ID: MSV-8245...

CVE-2026-20513

CVE-2026-20513 affects MediaTek's Audio HAL , where improper input validation can lead to a local information disclosure . An attacker must already hold the System privilege ; no user interaction is required. The vulnerability is rated CVSS 4.4 (MEDIUM) with high confidentiality impact but no int...

CVE-2026-20512

In Audio HAL, there is a possible escalation of privilege due to improper input validation. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11087540; Issue ID: MSV-8246...

CVE-2026-20512

CVE-2026-20512 is a local privilege escalation vulnerability in MediaTek's Audio HAL component, caused by improper input validation . An attacker who already holds the System privilege can escalate further without user interaction, potentially gaining full control over confidentiality, integrity,...

EUVD-2026-72202

In Power HAL, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11165543; Issue ID: MSV-9011...