CVE-2017-0411
HIGHAndroid 7.0 7.1.1 - Elevation of Privilege via Framework APIs Race Condition
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2017-0411. PoCs published by Google Security Research, lulusudoku.
AI-analyzed exploit summary This exploit leverages a deserialization vulnerability in Android's MemoryIntArray class to manipulate memory addresses and file descriptors, allowing an attacker to unmap critical memory regions in a remote process (e.g., system_server) by spoofing PID and memory address fields in a Parcel.
Description
An elevation of privilege vulnerability in the Framework APIs could enable a local malicious application to execute arbitrary code within the context of a privileged process. This issue is rated as High because it could be used to gain local access to elevated capabilities, which are not normally accessible to a third-party application. Product: Android. Versions: 7.0, 7.1.1. Android ID: A-33042690.
Exploits (2)
This exploit leverages a deserialization vulnerability in Android's MemoryIntArray class to manipulate memory addresses and file descriptors, allowing an attacker to unmap critical memory regions in a remote process (e.g., system_server) by spoofing PID and memory address fields in a Parcel.
This repository contains a functional PoC for CVE-2017-0411, an arbitrary unmap vulnerability in Android's MemoryIntArray. The exploit manipulates file descriptors and memory addresses to trigger uncontrolled unmapping in the ActivityManager service.
References (4)
Scores
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H