---
id: 8652
title: "Mitigations are attack surface, too"
source_domain: projectzero.google
source_url: "https://projectzero.google/2020/02/mitigations-are-attack-surface-too.html"
published_at: "2020-02-12T00:00:00Z"
tags: ["android", "kernel", "mitigations", "samsung", "project-zero"]
phying_url: "https://phying.com/item/8652"
lang: en
---

# Mitigations are attack surface, too

## Summary

This blog post discusses a bug leading to memory corruption in Samsung's Android kernel (specifically the kernel of the Galaxy A50, A505FN - I haven't looked at Samsung's kernels for other devices). I will describe the bug and how I wrote a (very unreliable) exploit for it. I will also describe how a second vulnerability, which had long been fixed in the upstream kernel, the upstream stable releases, and the Android common kernel, but not in Samsung's kernel, aided in its exploitation.

## Intelligence Metadata

- **Sources:** projectzero.google
- **Published:** 2020-02-12T00:00:00Z
- **Original:** https://projectzero.google/2020/02/mitigations-are-attack-surface-too.html
- **Phying News:** https://phying.com/item/8652