ReparcelBug2

CVE-2021-0928, incompatibilité de sérialisation writeToParcel/createFromParcel dans android.hardware.camera2.params.OutputConfiguration Il s'agit d'un exploit utilisant cette vulnérabilité pour une élévation de privilèges depuis une application Android installée vers l'application Paramètres...

CVE-2017-13286

CVE-2017-13286 CVE-2017-13286 Pocلا يمكن استخدامه جميع الموارد مأخوذة من هذه المقالة https://bbs.kanxue.com/thread-268506.htm السبب الرئيسي لهذه الثغرة هو عدم تناسق القراءة والكتابة لكائن Parcel، ويمكن تتبعه بدقة إلى الكود التالي public void writeToParcelParcel dest, int flags if dest == null thr...

test-poc

CVE-2021-0928, writeToParcel/createFromParcel serialization...

EUVD-2017-4803

Malware in sbrugna...

EUVD-2021-3547

Malicious code in bioql PyPI...

CVE-2021-0928

In createFromParcel of OutputConfiguration.java, there is a possible parcel serialization/deserialization mismatch due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for...

CVE-2021-0928

In createFromParcel of OutputConfiguration.java, there is a possible parcel serialization/deserialization mismatch due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for...

CVE-2021-0928

In createFromParcel of OutputConfiguration.java, there is a possible parcel serialization/deserialization mismatch due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for...

CVE-2021-0928

In createFromParcel of OutputConfiguration.java, there is a possible parcel serialization/deserialization mismatch due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for...

CVE-2021-0928

In createFromParcel of OutputConfiguration.java, there is a possible parcel serialization/deserialization mismatch due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for...

ASB-A-188675581

In createFromParcel of OutputConfiguration.java, there is a possible parcel serialization/deserialization mismatch due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

Google Android Local Elevation of Privilege Vulnerability (CNVD-2018-07851)

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA. An elevation vulnerability exists in the writeToParcel and readFromParcel of the OutputConfiguration.java file in Android versions 8.0 and 8.1. A local attacker can exploit this...