3 ms·
THIS IS ABSOLUTELY CRAZY! I have personally tested this on my Non-pixel Android 12 device and it works. My findings: - The exploit works even on first pwd input
by rex_lupi 4y ago
THIS IS ABSOLUTELY CRAZY! I have personally tested this on my Non-pixel Android 12 device and it works.
My findings:
- The exploit works even on first pwd input screen on boot. however, the filesystem is still encrypted and cannot be accessed by any means (ADB/MTP). launcher does not load fully. but settings and other things accesible from notification panel can be launched (BT/Hotspot etc). you can get list of installed apps and many other sensitive informations that are not stored in /data/media/0/.
- adb can be connected. shell can be launched but data partition is not accesible.
- mtp initializes but does not load.
I guess although one cannot access the user data, the ability to access/control other parts of system potentially exposes a huge attack surface.
- deleted 4y ago[deleted]
- Daniel_sk 4y agoWhat specific device do you have?
- rex_lupi 4y agoThe device I tested this on runs a moderately modified AOSP based os. I cannot specify the device model etc. I have also tested this on another LineageOS device and that is also affected. So I suppose any aosp-based rom that isn't heavily modified (like Samsung/MiUI) are affected.
- jascination 4y agoAre you able to set a new pin or fingerprint from that state?