Android Universal Root: Exploiting Mobile GPU / Command Queue Drivers
Rooting modern Android devices using kernel bugs from an unprivileged process without any hardcoded offsets/addresses and with almost a 100% success rate is exceptionally rare. After reporting the in-the-wild CVE-2020-0069 in Mediatek's Command Queue device driver, we conducted a security review on ImgTec's PowerVR GPU device driver during which we discovered and reported several such rare vulnerabilities (e.g. GPU CVE-2021-39815). In total, we discovered 35+ exploitable bugs.This talk will primarily focus on GPU hacking....
By: Jon Bottarini , Xingyu Jin , Richard Neal
Full Abstract & Presentation Materials: https://www.blackhat.com/us-22/briefings/schedule/#android-universal-root-exploiting-mobile-gpu--command-queue-drivers-27239
Видео Android Universal Root: Exploiting Mobile GPU / Command Queue Drivers канала Black Hat
By: Jon Bottarini , Xingyu Jin , Richard Neal
Full Abstract & Presentation Materials: https://www.blackhat.com/us-22/briefings/schedule/#android-universal-root-exploiting-mobile-gpu--command-queue-drivers-27239
Видео Android Universal Root: Exploiting Mobile GPU / Command Queue Drivers канала Black Hat
Показать
Комментарии отсутствуют
Информация о видео
Другие видео канала
Hacked on National Television
Grand Theft House: RF Lock Pick Tool to Unlock Smart Door Lock
Fuzzing the Native NTFS Read-Write Driver (NTFS3) in the Linux Kernel
Forward Focus – The Impact of Artificial Intelligence
firmWar: An Imminent Threat to the Foundation of Computing
Fireside Chat: Jeff Moss and Gaurav Keerthi
Scammers Who Scam Scammers, Hackers Who Hack Hackers: Exploring a Sub-economy on Cybercrime Forums
Ret2page: The Art of Exploiting Use-After-Free Vulnerabilities in the Dedicated Cache
Attack on Titan M, Reloaded: Vulnerability Research on a Modern Security Chip
AEPIC Leak: Architecturally Leaking Uninitialized Data from the Microarchitecture
Attacks From a New Front Door in 4G & 5G Mobile Networks
AAD Joined Machines - The New Lateral Movement
A Journey Into Fuzzing WebAssembly Virtual Machines
A New Trend for the Blue Team: Using a Symbolic Engine to Detect Evasive Forms of Malware/Ransomware
Monitoring Surveillance Vendors: A Deep Dive into In-the-Wild Android Full Chains in 2021
New Memory Forensics Techniques to Defeat Device Monitoring Malware
The 8th Annual Black Hat USA NOC Report
Better Privacy Through Offense: How To Build a Privacy Red Team
Unlimited Results: Breaking Firmware Encryption of ESP32-V3
Backdooring and Hijacking Azure AD Accounts by Abusing External Identities