04.11.2016 Views

Rooting Every Android From extension to exploitation

eu-16-Shen-Rooting-Every-Android-From-Extension-To-Exploitation

eu-16-Shen-Rooting-Every-Android-From-Extension-To-Exploitation

SHOW MORE
SHOW LESS

You also want an ePaper? Increase the reach of your titles

YUMPU automatically turns print PDFs into web optimized ePapers that Google loves.

Agenda<br />

• Overview<br />

• Wi-Fi chipsets for <strong>Android</strong><br />

• WEXT Attack Surface Analysis<br />

• Use device specific vulnerabilities <strong>to</strong> root them all<br />

• Case Studies<br />

• Stack overflow vulnerability in Qualcomm WEXT<br />

• Data section overflow vulnerability in MTK WEXT<br />

• Use-After-Free vulnerability in Broadcom WEXT<br />

• Google’s latest mitigation<br />

• Conclusion

Hooray! Your file is uploaded and ready to be published.

Saved successfully!

Ooh no, something went wrong!