search
Pixel 12
Trends
- 1Security firm details Binder use-after-free exploit on Pixel 6●We're publishing Part 4 of our Android kernel exploit chain: CVE-2023-20938, a Binder use-after-free on a Pixel 6 runnin
Security firm eShard has published the fourth part of its Android kernel exploit chain research, focusing on CVE-2023-20938, a use-after-free vulnerability in the Binder driver. The writeup demonstrates how, on a Pixel 6 running Android 12, freed kernel pages are reused as epoll objects, allowing two ordinary syscalls to read arbitrary memory addresses.