A few notes on usefully exploiting libstagefright on Android 5.x
ID: 06c4ecc4-880f-56ee-a957-a97fbf4e2403
STIX ID: report--06c4ecc4-880f-56ee-a957-a97fbf4e2403
Feed Name: NCC Research
This whitepaper documents research into improving exploits for the Android libstagefright bug CVE-2015-3684, describing methods for address-space spraying, coping with SELinux sandboxing, automating device identification, and staging kernel exploits; it cites prior public work and credits other researchers. The author reports notable limitations — no ASLR bypass found and unreliable exploitation on Android 4.x — so the paper shares technical techniques and lessons learned rather than evidence of active exploitation.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.
