mtkclient

Idioma: 🇺🇸 🇨🇳 MTKClient Solo una herramienta mtk para explotación, lectura/escritura de flash y hacer cosas locas. En Windows, necesitas instalar el puerto mtk original y el controlador usbdk consulta las instrucciones a continuación. En Linux, solo se necesita un kernel parcheado cuando se usa...

AutomatedRoot

AutomatedRoot Rootea dispositivos MediaTek usando el exploit mtk-su CVE-2020-0069. Requisitos Python 3.9 o más reciente en %PATH% para Windows. ADB en %PATH% para Windows. El PoC del CVE-2020-0069 mtk-su. Uso Descarga los binarios de mtk-su desde la página de MediaTek's SU en XDA y muévelos a sus...

ghidra-mtk-loader

Cargador de md1img de MediaTek para Ghidra Cargador de Ghidra para el formato de imagen de firmware de módem md1img de MediaTek. Actualmente, solo se admite firmware basado en nanoMIPS, pero es posible que las funciones básicas sigan funcionando si eliges manualmente una arquitectura diferente p...

mtk_bp

MediaTek BP firmware tools This repository contains Kaitai-based file format definitions related to MediaTek modem firmware, as well as some basic command line tools for interacting with these file types. The Kaitai IDE can also be used to interactively explore files using the Kaitai definitions...

CVE-2026-43499-aristotle

CVE-2026-43499 — aristotle au/KDDI Xiaomi XIG04 Escalada de privilegios local tmp-root para el au/KDDI Xiaomi "aristotle" XIG04 en Android 12 , a través de CVE-2026-43499. Es una primitiva de root del propietario del dispositivo: enraíza tu propio teléfono por ejemplo, para reactivar ADB cuando l...

FirmWire

root@kitploit: -. .-. | |+ \ \ / /+ .-. .- \ / \ | | | | '| ' \ // / | | '/ - / \ / '-' '-|| | || |||// | || |-' '-' FirmWire FirmWire es una plataforma de análisis de firmware de banda base de sistema completo que soporta Samsung y MediaTek. Permite fuzzing, análisis de causa raíz y...

CVE-2020-0069_poc

Descripción Este repositorio contiene los materiales que utilizamos para investigar CVE-2020-0069 en un Xiaomi Redmi 6a con un SoC Mediatek MT6762M. Hay tres programas: kernelrw.c un programa en C que permite leer/escribir memoria del kernel poc.sh un script de shell syscallhook.c una biblioteca ...

mediatek-wlan-heap-overflow-cve-2026-20452-filogic-router-rce

CVE-2026-20452 — PoC de desbordamiento de montón en el AP WLAN de MediaTek Exploit de prueba de concepto para CVE-2026-20452, un desbordamiento de búfer basado en montón en el controlador del punto de acceso WLAN de MediaTek. Vulnerabilidad CVE : CVE-2026-20452 CVSS : 8.0 ALTA CWE : CWE-122 —...

mtk_su

MTK SU MTK SU is a LPE for CVE-2020-0069. This exploit was tested on a TCL LX A502DL with a MediaTek MT6739 SoC running Android 8.1.0. Build root@kitploit: mkdir build cd build export ANDROIDNDK= cmake -DCMAKETOOLCHAINFILE="$ANDROIDNDK?/build/cmake/android.toolchain.cmake"...

Astra Linux – Vulnerability in Linux 5.10, Linux

In the Linux kernel, the following vulnerabilities have been resolved: ASoC: mediatek: mt8173: Fixed a refcount leak in the mt8173rt5650rt5676devprobe function. The ofparsephandle function returns a node pointer with a refcount incremented. We should use ofnodeput on it when it is no longer neede...

Astra Linux – Vulnerability found in Linux 5.15, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: Networks: Ethernet; mtkethsoc: fixed the issue of PPE hanging. A patch to resolve this issue was found in MediaTek’s GPL-licensed SDK. In the mtkppestop function, the PPE scan mode is not disabled before disabling the PPE. This...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: ASoC: mediatek: mt8173-rt5650: Fixed a refcount leak in mt8173rt5650devprobe. ofparsephandle returns a node pointer with a refcount incremented; we should use ofnodeput on it when it is no longer needed. Fixed refcount leaks i...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: clk: mediatek – Performing a runtime PM get operation on controllers during probing. The mt8183-mfgcfg component has a mutual dependency with genpd during the probing stage, which leads to a deadlock in the following call stack:...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: ASoC: mediatek: sof-common: Added a NULL check for the normallink string. It is not guaranteed that all entries of struct sofconnstream declare a normallink a non-SOF, direct link string. This applies to SoCs that only support SO...

GhostLock_MT6983V_5.10

GhostLockMT6983V5.10 High-risk vulnerability CVE-2026-43499, implementation on the 5.10 kernel and MediaTek MT6983V...

CVE-2026-20516

CVE-2026-20516: MiracastService confused deputy on Android TV Research and disclosure by Davide Di Matteo @Dingo97. This is my first credited CVE. I found an improperly exported, system-privileged Miracast service while researching a PEAQ Android TV. A caller can supply an intent extra that makes...

CVE-2024-20137

CVE-2024-20137 Código Python para explotar la vulnerabilidad en el controlador WLAN de los SoC de MediaTek MT6890, MT7622, MT7915, MT7916, MT7981, MT7986 MediaTek: https://corp.mediatek.com/product-security-bulletin/December-2024 NIST: https://nvd.nist.gov/vuln/detail/CVE-2024-20137 Acerca del...

Root-My-Device-Payloads

Root My Device Payloads A fork of BuSung-dev/Root-My-Galaxy-...

CVE-2026-80935

A flaw was found in the Linux kernel's Wi-Fi driver for MediaTek MT7996 devices. A malicious or malfunctioning Wi-Fi device can exploit improper validation of an EEPROM Electrically Erasable Programmable Read-Only Memory address during a copy operation. This can lead to an out-of-bounds write,...

cve-2023-20768

CVE-2023-20768 on the Samsung Galaxy M32 — a reachability study Summary. CVE-2023-20768 is a type confusion CWE-843 in MediaTek's ION allocator. I checked whether it is actually exploitable on a Samsung SM-M325F Galaxy M32, Helio G80 running the July 2022 firmware. The vulnerable code is present,...