Phying News
P非影 中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

MMS Exploit Part 2: Effective Fuzzing of the Qmage Codec

projectzero.google | blog | #fuzzing | #android | #project-zero | #mms | #qmage

Summary

This post is the second of a multi-part series capturing my journey from discovering a vulnerable little-known Samsung image codec, to completing a remote zero-click MMS attack that worked on the latest Samsung flagship devices. New posts will be published as they are completed and will be linked here when complete.
Published
Collected

original ↗

Related coverage

blog · projectzero.google
MMS Exploit Part 4: MMS Primer, Completing the ASLR Oracle
This post is the fourth of a multi-part series capturing my journey from discovering a vulnerable little-known Samsung image codec, to completing a remote zero-click MMS attack that worked on the latest Samsung flagship devices. New posts will be published as they are completed and will be linked here when complete.
blog · projectzero.google
MMS Exploit Part 3: Constructing the Memory Corruption Primitives
This post is the third of a multi-part series capturing my journey from discovering a vulnerable little-known Samsung image codec, to completing a remote zero-click MMS attack that worked on the latest Samsung flagship devices. New posts will be published as they are completed and will be linked here when complete.
advisory · projectzero.google
Return to libstagefright: exploiting libutils on Android
Fuzzing Android devices uncovered CVE-2016-3861 in libutils, a severe bug reachable from many attack vectors and usable for remote code execution and elevation into the system_server SELinux domain.
research · projectzero.google
Exploiting NVMAP to escape the Chrome sandbox - CVE-2014-5332
A Google Project Zero post exploiting a bug in NVIDIA's NVMAP driver (CVE-2014-5332) to escape the Chrome for Android sandbox.
blog · projectzero.google
On the Effectiveness of Mutational Grammar Fuzzing
A Google Project Zero study examining how effective mutational grammar-based fuzzing is at finding software vulnerabilities.
blog · projectzero.google
The Windows Registry Adventure #7: Attack surface analysis
Part 7 of the Windows Registry Adventure series, mapping which Windows components parse registry data and identifying the most promising attack surface for deeper research.
back