Exploitation Summary
EIP tracks 1 public exploit for CVE-2017-0806. PoCs published by michalbednarski.
AI-analyzed exploit summary This repository contains a functional proof-of-concept exploit for CVE-2017-0806, demonstrating a writeToParcel/createFromParcel mismatch in the Android GateKeeperResponse class. The exploit manipulates Bundle serialization to achieve privilege escalation by crafting ambiguous parcel data.
Description
An elevation of privilege vulnerability in the Android framework (gatekeeperresponse). Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0. Android ID: A-62998805.
Exploits (1)
This repository contains a functional proof-of-concept exploit for CVE-2017-0806, demonstrating a writeToParcel/createFromParcel mismatch in the Android GateKeeperResponse class. The exploit manipulates Bundle serialization to achieve privilege escalation by crafting ambiguous parcel data.
References (3)
Scores
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H