在binder.c中的UAF漏洞

Description

PoC

None yet. Search at https://trap.biu.life/?ref=rss

References

• https://bbs.kanxue.com/thread-266198.htm
• https://zhuanlan.zhihu.com/p/357867006
• https://www.4hou.com/posts/B1VJ
• https://www.huawei.com/cn/psirt/security-advisories/2019/huawei-sa-20191030-01-binder-cn
• https://geneblue.github.io/2019/10/23/android/vul--android-binder-cve20192215/
• https://blog.csdn.net/weixin_28679635/article/details/117669204
• https://www.exploit-db.com/exploits/47463
• https://avd.aliyun.com/detail?id=AVD-2026-23184
• https://nvd.nist.gov/vuln/detail/CVE-2024-46740
• https://www.longterm.io/cve-2020-0423.html

Related Vulnerabilities

• (CVE-2025-0087) Android UninstallerActivity onCreate 方法权限漏洞 权限管理错误
• （CVE-2025-21010）三星账户权限管理不当漏洞
• （CVE-2025-21016）Android PkgPredictorService访问控制漏洞
• (CVE-2025-20990) 系统设备节点访问控制漏洞
• PoCandroid-minsdk-21: AndroidManifest.xml minSdkVersion Set to 21 (Insecure Minimum SDK Version)
• PoCandroid-user-certificates-trust: Android Trusts User Certificates
• PoCimproper-certificate-validation: Android Improper Certificate Validation - Detect
• PoCandroid-debug-enabled: Android Debug Enabled
• PoCinsecure-provider-path: Android Insecure Provider Path - Detect
• PoCandroid-debug-database-exposed: Android Debug Manager
• PoCexposed-adb: Exposed Android Debug Bridge
• 多家厂商多个产品安全漏洞(CVE-2022-1802)
• 多家厂商多个产品安全漏洞(CVE-2022-1529)