Mmastodon TechnologyMobile first seen 4 d ago, last 4 d ago, peak #3

Security firm details Binder use-after-free exploit on Pixel 6

Original: We're publishing Part 4 of our Android kernel exploit chain: CVE-2023-20938, a Binder use-after-free on a Pixel 6 runnin

Security firm eShard has published the fourth part of its Android kernel exploit chain research, focusing on CVE-2023-20938, a use-after-free vulnerability in the Binder driver. The writeup demonstrates how, on a Pixel 6 running Android 12, freed kernel pages are reused as epoll objects, allowing two ordinary syscalls to read arbitrary memory addresses.

Why now: Technical security researchers are following the detailed release of a documented Android kernel exploit chain affecting Pixel devices.

eShardGoogle Pixel 6Android 12CVE-2023-20938Binder driver

Open on mastodon →

Rank over time, top of the chart is #1. 2 snapshots from 4 d ago to 4 d ago.

Evidence

• We're publishing Part 4 of our Android kernel exploit chain: CVE-2023-20938, a Binder use-after-free on a Pixel 6 running Android 12. Freed kernel pages come back as epoll objects, and two ordinary syscalls read any address. 👉 https://www. eshard.com/blog/kernel-uaf-4-r ead #… · eshard@infosec.exchange · 2

API: https://socialmediatrends-api.osmike.com/v1/trends/4608239