4 ms·
Qualcomm exploit chain brings bootloader unlocking freedom to Android flagships
- ledoge 7mo agoInteresting side note: By design, Android lets any app escalate its privileges to root when SELinux is disabled: https://www.reddit.com/r/Android/comments/lfye5r/comment/gmoi05a/ https://www.reddit.com/r/Android/comments/lfye5r/comment/gmo... Therefore, just the boot parameter injection can be used to get temporary root privileges on a whole bunch of phones.
- tripdout 7mo agoIs Qualcomm serious? The kernel commandline parameter injection is basically the same thing from a decade ago on Motorola phones [0]. 0: https://alephsecurity.com/2017/05/23/nexus6-initroot/ https://alephsecurity.com/2017/05/23/nexus6-initroot/