The Qualcomm DSP Driver - Unexpectedly Excavating an Exploit

NetSPI details CVE-2019-10617, a local privilege escalation in Qualcomm's AtherosSvc Windows service, where a ProgramData INI file lets unprivileged users perform arbitrary registry operations.

When writing an Android exploit, breaking out of the application sandbox is often a key step. There are a wide range of remote attacks that give you code execution with the privileges of an application (like the browser or a messaging application), but a sandbox escape is still required to gain full system access.

Recently, there has been some attention around the topic of physical attacks on smartphones, where an attacker with the ability to connect USB devices to a locked phone attempts to gain access to the data stored on the device. This blogpost describes how such an attack could have been performed against Android devices (tested with a Pixel 2).

Bishop Fox shows how to bypass .NET MAUI's platform packaging to extract readable C# assemblies from Android and iOS apps, then use that shared-assembly insight to uncover critical vulnerability patterns in common business logic.

Second part of Project Zero's Pixel 9 zero-click chain research: auditing the BigWave AV1 decoder driver reachable from the mediacodec sandbox and finding bugs that yield kernel read and write.

Part 5 of the Windows Registry Adventure series, dissecting the regf file format underlying registry hives, its parsing hazards, and why it matters for fuzzing.