4560 matches found
FirmWire
-. .-. | |+ \ \ / /+ .-. .- \ / \ | | | | '| ' \ // / | | '/ - / \ / '-' '-|| | || |||// | || |-' '-' FirmWire FirmWire is a full-system baseband firmware analysis platform that supports Samsung and MediaTek. It enables fuzzing, root-cause analysis, and debugging of baseband firmware images...
CVE-2024-20137
CVE-2024-20137 Python code for expoiting the vulnerability in wlan driver of MediaTek SOCs MT6890, MT7622, MT7915, MT7916, MT7981, MT7986 MediaTek: https://corp.mediatek.com/product-security-bulletin/December-2024 NIST: https://nvd.nist.gov/vuln/detail/CVE-2024-20137 About the code This code is...
AutomatedRoot
AutomatedRoot Root MediaTek devices using mtk-su exploit CVE-2020-0069. Requirements Python 3.9 or newerin %PATH% for Windows. ADB in %PATH% for Windows. The CVE-2020-0069 PoC mtk-su. Usage Download the mtk-su binaries from the MediaTek's SU XDA page and move them to their corresponding folders...
CVE-2020-0069_poc
Description This repository contains the materials we used to investigate CVE-2020-0069 on a Xiaomi Redmi 6a with a Mediatek SoC MT6762M. There are three programs: kernelrw.c a C program allowing to read/write kernel memory poc.sh a shell script syscallhook.c a C library that can be used to trace...
CVE-2026-43499-aristotle
CVE-2026-43499 — aristotle au/KDDI Xiaomi XIG04 Local privilege escalation tmp-root for the au/KDDI Xiaomi "aristotle" XIG04 on Android 12 , via CVE-2026-43499. It is a device-owner rooting primitive: it roots your own phone e.g. to re-enable ADB when developer options are unreachable. This is an...
mtk_su
MTK SU MTK SU is a LPE for CVE-2020-0069. This exploit was tested on a TCL LX A502DL with a MediaTek MT6739 SoC running Android 8.1.0. Build mkdir build cd build export ANDROIDNDK= cmake -DCMAKETOOLCHAINFILE="$ANDROIDNDK?/build/cmake/android.toolchain.cmake" -DANDROIDABI="armeabi-v7a"...
mtk_bp
MediaTek BP firmware tools This repository contains Kaitai-based file format definitions related to MediaTek modem firmware, as well as some basic command line tools for interacting with these file types. The Kaitai IDE can also be used to interactively explore files using the Kaitai definitions...
GhostLock_MT6983V_5.10
GhostLockMT6983V5.10 High-risk vulnerability CVE-2026-43499, implementation on the 5.10 kernel and MediaTek MT6983V...
CVE-2026-20404-MediaTek-modem-remote-DoS-rogue-base-station-scenario-
CVE-2026-20404-MediaTek-modem-remote-DoS-rogue-base-station-scenario- A MediaTek modem input validation issue can cause a system crash remote DoS when a UE connects to a rogue base station controlled by an attacker with no user interaction required. The provided check.sh code is used to: 1...
USN-9018-1 linux, linux-aws, linux-gcp, linux-ibm, linux-oem-7.0, linux-oracle vulnerabilities
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Network file systems library; - Stream parser; - ARM64 architecture; - PowerPC architecture; - RISC-V architecture;...
CVE-2024-20154
CVE-2024-20154: NB-IoT SIB1-NB Stack Overflow in MediaTek MT6769 Baseband Classification: CWE-121 — Stack-based Buffer Overflow Severity: Critical MediaTek bulletin · 8.8 High, Attack Vector: Adjacent CISA-ADP Type: Remote Code Execution — no user interaction, no prior association Disclosure:...
ghidra-mtk-loader
MediaTek md1img Loader for Ghidra Ghidra loader for the MediaTek md1img modem firmware image format. Currently, only nanoMIPS-based firmware is supported, but basic features may still work if you manually choose a different architecture e.g., MIPS when loading an image. Setup For nanoMIPS-based...
CVE-2026-20516
CVE-2026-20516: MiracastService confused deputy on Android TV Research and disclosure by Davide Di Matteo @Dingo97. This is my first credited CVE. I found an improperly exported, system-privileged Miracast service while researching a PEAQ Android TV. A caller can supply an intent extra that makes...
cve-2023-20768
CVE-2023-20768 on the Samsung Galaxy M32 — a reachability study Summary. CVE-2023-20768 is a type confusion CWE-843 in MediaTek's ION allocator. I checked whether it is actually exploitable on a Samsung SM-M325F Galaxy M32, Helio G80 running the July 2022 firmware. The vulnerable code is present,...
Astra Linux – vulnerability in linux-6.12, linux-6.18
In the Linux kernel, the following vulnerability has been resolved: ASoC: mediatek: mt8365-afe-pcm: fix possible NULL-pointer dereferences in mt8365afesuspend mt8365afesuspend allocates the register backup buffer using devmkcalloc, but fails to check for allocation failure prior to using the...
Astra Linux – vulnerability in linux-6.12, linux-6.18
In the Linux kernel, the following vulnerability has been resolved: pinctrl: mediatek: use devmgpiochipadddata for GPIO chip The gpiochip is allocated with device-managed memory but registered with the non-managed gpiochipadddata. This was harmless while the drivers were built-in; however, once...
Astra Linux – vulnerability in linux-6.12, linux-6.18
In the Linux kernel, the following vulnerability has been resolved: drm/mediatek: Add missing ISERR check for ovladaptor platform device platformdeviceregisterdata can fail and return an ERRPTR, but the return value is used without checking, resulting in an invalid pointer being stored in...
Astra Linux – vulnerability in linux-6.12
In the Linux kernel, the following vulnerability has been resolved: drm/mediatek: dsi: Store driver data before invoking mipidsihostregister The call to mipidsihostregister triggers a callback to mtkdsibind, which uses devgetdrvdata to retrieve the mtkdsi struct; therefore, this structure must be...
