ended5월 17일· 1 sources
Pixel 10용 0-click 익스플로잇 체인
Why it matters
This zero-click exploit chain exposes critical driver-level vulnerabilities in Android, where the VPU driver's direct MMIO register exposure to userspace enables arbitrary kernel read/write access with just five lines of code. While Google's 71-day patch response demonstrates improved security processes, the easily-discoverable vulnerability highlights persistent gaps in Android driver security practices. The incident underscores that even brief security audits uncover fundamental flaws, emphasizing the urgent need for more rigorous security-conscious driver development in the Android ecosystem.
1
Sources
+0
24h
—
Growth
127d
Active
zero-click exploitPixel 10VPU driverprivilege escalationMMIO memory mapping