This video illustrates the flow of the Android 10 remote ASLR bypass algorithm #2, as discussed in [ Ссылка ]. It was used to exploit the CVE-2020-8899 Qmage codec vulnerability to execute arbitrary code on a Samsung Galaxy Note 10+ phone via MMS in April 2020.
Link to the full exploit demo: [ Ссылка ]
Ещё видео!