Exploitation Summary
EIP tracks 2 public exploits for CVE-2015-1528. PoCs published by secmob, kanpol.
AI-analyzed exploit summary This PoC exploits CVE-2015-1528, a privilege escalation vulnerability in Android's mediaserver, surfaceflinger, and system_server components via Binder calls. It injects code into these services to escalate privileges, with hardcoded addresses for Nexus 5 (Android 5.0).
Description
Integer overflow in the native_handle_create function in libcutils/native_handle.c in Android before 5.1.1 LMY48M allows attackers to obtain a different application's privileges or cause a denial of service (Binder heap memory corruption) via a crafted application, aka internal bug 19334482.
Exploits (2)
This PoC exploits CVE-2015-1528, a privilege escalation vulnerability in Android's mediaserver, surfaceflinger, and system_server components via Binder calls. It injects code into these services to escalate privileges, with hardcoded addresses for Nexus 5 (Android 5.0).
This PoC demonstrates privilege escalation via CVE-2015-1528, exploiting a vulnerability in Android's Binder IPC mechanism to inject code into mediaserver, surfaceflinger, and system_server processes. It includes shellcode injection and memory manipulation techniques to achieve local privilege escalation on Android 5.0.