Skip to content
Remote Code Execution as System User on Android 5 Samsung Devices abusing WifiCredService (Hotspot 2.0)
blog.quarkslab.com | vulnerability | #rce | #android | #path-traversal | #mobile-security | #vulnerability | #samsung
Summary
Analysis of an Android 5 Samsung RCE (found independently by Project Zero and Quarkslab): WifiCredService unzips cred*.zip files without validating names, allowing system-level arbitrary file writes.
- Published
- Collected