Exploitation Summary
EIP tracks 3 public exploits for CVE-2022-20186. PoCs published by Bariskizilkaya, SmileTabLabo, flora6907.
AI-analyzed exploit summary This is a functional exploit for CVE-2022-20186, targeting a memory corruption vulnerability in the Arm Mali GPU kernel driver. It achieves arbitrary kernel code execution to disable SELinux and escalate privileges to root on affected Android devices.
Description
In kbase_mem_alias of mali_kbase_mem_linux.c, there is a possible arbitrary code execution due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-215001024References: N/A
Exploits (3)
This is a functional exploit for CVE-2022-20186, targeting a memory corruption vulnerability in the Arm Mali GPU kernel driver. It achieves arbitrary kernel code execution to disable SELinux and escalate privileges to root on affected Android devices.
This is a functional exploit for CVE-2022-20186, targeting a memory corruption vulnerability in the Arm Mali GPU kernel driver. It achieves arbitrary kernel code execution, disables SELinux, and escalates privileges to root on affected Android devices.
This repository provides a functional proof-of-concept exploit for CVE-2022-20186, targeting a vulnerability in the Mali GPU driver. It includes detailed setup instructions, build scripts, and a PoC binary to demonstrate the exploit in a QEMU-based environment.
References (2)
Scores
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H