The Hidden RCE Surfaces That Control the Droids
summary
Finds multiple real RCEs: a Chromium leaf pack processor RCE (CVE-2020-0224 / 0240 class) that yields arbitrary read/write and a reverse shell in platform context, several Samsung Chrome codec bugs including CVE-2021-24346 in DNG parsing, and Samsung Notes SPI flaws (CVE-2021-25496, 25498) enabling function-pointer hijack. Builds native harnesses and runs binary-only fuzzing on x86 servers using QEMU user‑mode + AFL++ coverage hooks, achieving thousands of crashes per server and producing working exploits; pack fixes ship in Android 10/11/12.
AI-written summary · about
chapters (7)
- 0:00Start
- 16:27Target Two: API reversing of Samsung Quram Library
- 22:56Target Three: Time to deep dive in
- 23:43Target Three: Find something interesting
- 25:10Target Three: Attack surface locating
- 30:53Case Study: CVE-2021-25496
- 35:23Static rewrite for Android binaries
related talks
51mExploiting Hardware Glitches And Side Channels In Perfect Software
44mDeep Analysis of Exploitable Linux Kernel Vulnerabilities 2017-2019
44mInside Google's Discovery and Remediation of a Critical CPU Vulnerability
44mExposing Critical Threats In Millions Of Connected Devices
48mA Weakness In Chrome & A New Hacking Technique
42mD1T2 - Rooting Android 8 with a Kernel Space Mirroring Attack
47mExploring the New World : Remote Exploitation of SQLite and Curl
36mPhysical Attacks Against Smartphones