Phying News
P非影 中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Summary: MTE As Implemented

projectzero.google | blog | #memory-safety | #android | #arm | #mitigation | #mte | #summary

Summary

The closing summary of the MTE As Implemented series, assessing how Arm Memory Tagging Extension behaves in real deployments and its practical effect on memory corruption exploitation.
Published
Collected

original ↗

Related coverage

blog · projectzero.google
MTE As Implemented, Part 1: Implementation Testing
Part 1 of the MTE As Implemented series, testing real-world implementations of Arm Memory Tagging Extension to establish a correctness baseline for later mitigation analysis.
blog · projectzero.google
First handset with MTE on the market
Notes on the first handset shipping with Arm Memory Tagging Extension (MTE) support, what the hardware mitigation means for memory-safety exploits, and early observations.
blog · projectzero.google
MTE As Implemented, Part 2: Mitigation Case Studies
Part 2 of the MTE As Implemented series, presenting case studies of how Memory Tagging Extension mitigates real memory corruption exploits and where attackers might adapt.
blog · projectzero.google
MTE As Implemented, Part 3: The Kernel
Part 3 of the MTE As Implemented series, examining kernel-side support for Arm Memory Tagging Extension, its performance costs, and gaps observed in real implementations.
blog · projectzero.google
Effective Fuzzing: A Dav1d Case Study
A case study on effective fuzzing of dav1d, the open-source AV1 decoder, covering harnessing decisions, coverage strategy, and lessons for hunting codec vulnerabilities.
blog · projectzero.google
Exploiting null-dereferences in the Linux kernel
An examination of how null pointer dereferences in the Linux kernel can be turned into exploitable primitives under modern configurations, with examples and mitigations.
back