PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Android Bluetooth Vulnerabilities in the March 2018 Security Bulletin

blog.quarkslab.com | advisory | #android | #vulnerability | #poc | #bluetooth | #bnep | #oob-read
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

Technical details and PoCs for two BNEP bugs fixed in the March 2018 Android Security Bulletin — a remote heap disclosure and an OOB read, triggerable without user interaction.
Published
Collected

Related coverage

research · github.com
Infinity Core: Linux Kernel Core Subsystems LPE and Container Escape Research
Unlike most modern Linux kernel exploits that depend on networking, eBPF, or unprivileged user namespaces, these vulnerabilities reside in fundamental kernel core subsystems, rendering standard container sandboxes and Android application domain restrictions ineffective against local privilege escalation.
High · vulnerability · codeberg.org
cowcups: CUPS cups-fontpath Local Privilege Escalation (LPE) to Root PoC
Demonstrates an effective local root privilege escalation chain in default CUPS environments by abusing printer discovery and Ghostscript font search paths.
vulnerability · bugpwn.com
open62541: Integer Overflow → Heap Overflow → RCE.
Original research: how a 16 bit size field overflow in open62541's custom DataType machinery lets a malicious OPC UA server corrupt a connecting client's heap, up to remote code execution. CVE-2026-116014, CVSS 9.2. Root cause, networked PoC, and the official fix. By BUG|PWN.
Critical · advisory · github.com
[CVE-2026-94545] Remote Code Execution in next/og ImageResponse
Dynamic Open Graph image generation is common in Next.js apps; any route accepting user parameters to customize SVG cards could lead to full Node.js server compromise.
Medium · advisory · github.com
Heap Use-After-Free and Double Free in libheif ImageItem Encoding (GHSA-qwpf-5wf7-r996)
libheif is a core dependency for HEIF and AVIF image decoding across servers and desktop utilities; services that accept user-uploaded images and transcode them are susceptible to remote crashes and heap exploitation.
advisory · projectzero.google
Return to libstagefright: exploiting libutils on Android
Fuzzing Android devices uncovered CVE-2016-3861 in libutils, a severe bug reachable from many attack vectors and usable for remote code execution and elevation into the system_server SELinux domain.
Back