PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Kernel Vulnerabilities in the Samsung S4

blog.quarkslab.com | research | #privilege-escalation | #android | #memory-corruption | #vulnerability | #kernel | #samsung | #cve-2015-1800 | #cve-2015-1801
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

Kernel bugs in the Samsung S4 (GT-I9500), unpatched on Jelly Bean and KitKat: CVE-2015-1800, a stack leak in the samsung_extdisp driver, and CVE-2015-1801 memory corruption, with a proposed patch.
Published
Collected

Related coverage

research · github.com
Infinity Core: Linux Kernel Core Subsystems LPE and Container Escape Research
Unlike most modern Linux kernel exploits that depend on networking, eBPF, or unprivileged user namespaces, these vulnerabilities reside in fundamental kernel core subsystems, rendering standard container sandboxes and Android application domain restrictions ineffective against local privilege escalation.
blog · projectzero.google
BitUnmap: Attacking Android Ashmem
A Project Zero post on attacking Android's ashmem shared memory interface, showing how wrong assumptions about its internals led to bugs in core system code.
High · vulnerability · codeberg.org
cowcups: CUPS cups-fontpath Local Privilege Escalation (LPE) to Root PoC
Demonstrates an effective local root privilege escalation chain in default CUPS environments by abusing printer discovery and Ghostscript font search paths.
vulnerability · eshard.com
[CVE-2023-20938] Kernel UaF to Root #1: Freeing an Object That’s Still in Use
A use-after-free in Android’s Binder driver, recorded once and replayed at will. Part 1 of a series building a full kernel exploit chain with time travel debugging.
vulnerability · volexity.com
[CVE-2026-104935] A Series of Unauthenticated Events: Chained Exploitation of Ivanti Connect Secure Zero-Days
# A Series of Unauthenticated Events: Chained Exploitation of Ivanti Connect Secure Zero-Days October 13, 2026 Charlie Gardner, Sean Koessel, Steven Adair, and Volexity Volcano Team **_Volexity...
blog · projectzero.google
Hack The Galaxy: Hunting Bugs in the Samsung Galaxy S6 Edge
Project Zero researched the Samsung Galaxy S6 Edge and reported 11 high-impact security issues, discussing motivations, methodology and lessons learned from the device research.
Back