Attributed metadata history
Up to 100 retained publisher events per page for da787f03b9ce885021e36386498c168b8a492ec5c15547fb0ac1ae9aebf2c1bd. Withdrawals and unavailable references remain attributed to their publishers.
intelligence_src_350d40f2cc69277bca
observed · 2026-10-12 08:34:02 UTC
available
Fingerprint: fe0fdc07a129ff203534388ab215df24d870069207d85287923a2a35a12b5578
intelligence_src_350d40f2cc69277bca
observed · 2026-10-12 08:34:02 UTC
Additional posts in this series: Part 1 Part 2 In my Basebanheimer talk at Hardwear.io, I explained a method for exploiting the Mediatek Baseband Pivot vulnerability CVE-2022-21765 for arbitrary code execution in the Linux kernel on Mediatek’s older (“Helio”) chipsets, which use 32-bit kernels. I also mentioned that using previous ideas, the vulnerability could theoretically be exploited on Mediatek’s newest chipset family (Dimensity, which uses 64-bit kernels) as well. After the conference, with my college Lorant Szabo we have completed this exercise. The vulnerabilities: CVE-2022-21765 and CVE-2022-21769 To recap, the vulnerabilities provide an OOB read/write in the Linux kernel driver that implements the Application (AP) and Cellular Processor (CP) interface, which Mediatek calls the CCCI driver.
Fingerprint: c685fc3788e2d9e3d83aaa1625ab7025dcb528b097b17665f5e29dc7842b1bd6