Rooting modern Android devices using kernel bugs from an unprivileged process without any hardcoded offsets/addresses and with almost a 100% success rate is exceptionally rare. After reporting the in-the-wild CVE-2020-0069 in Mediatek's Command Queue device driver, we conducted a security review on ImgTec's PowerVR GPU device driver during which we discovered and reported several such rare vulnerabilities (e.g. GPU CVE-2021-39815). In total, we discovered 35+ exploitable bugs.This talk will primarily focus on GPU hacking....
By: Jon Bottarini , Xingyu Jin , Richard Neal
Full Abstract & Presentation Materials: www.blackhat.c...
Негізгі бет Android Universal Root: Exploiting Mobile GPU / Command Queue Drivers
Пікірлер