NOMISEC-fuhei/CVE-2024-31317
NOMISEC WORKING POC
Exploit for CVE-2024-31317
- Google Android - Insecure Deserialization
AI Analysis
This repository contains a functional exploit for CVE-2024-31317, a command injection vulnerability in Android's Zygote process. The exploit leverages the `hidden_api_blacklist_exemptions` setting to inject malicious commands, potentially leading to local privilege escalation (LPE) by spawning a new process with elevated privileges.
Attack Type
LPE
Complexity
moderate
Reliability
reliable
Click anywhere or press Esc to close