Phying News
P非影 中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

[CVE-2022-20233] Attacking Titan M with Only One Byte

blog.quarkslab.com | vulnerability | CVE-2022-20233 | #fuzzing | #android | #exploitation | #google | #titan-m | #cve-2022-20233

Summary

How CVE-2022-20233, found via emulation-based fuzzing with AFL++ in Unicorn mode, was exploited to obtain code execution on Google's Titan M security chip.
Published
Collected

original ↗

Related coverage

  1. Bugcrowd Founder on Google Increasing Android Bounty to $1.5 Million (bugcrowd.com)
  2. Google ARTEMIS: Natural-Language Driven Android Automation & Mobile AI Agent Framework (github.com)
  3. Remote Denial-of-Service on CycloneTCP : CVE-2021-26788 (blog.quarkslab.com)
  4. Exploiting MS16-145: MS Edge TypedArray.sort Use-After-Free (CVE-2016-7288) (blog.quarkslab.com)
  5. CVE-2016-7259: An empty file into the blue (blog.quarkslab.com)
  6. Xen exploitation part 3: XSA-182, Qubes escape (blog.quarkslab.com)

back