CVE-2018-9468 PoC — Google Android 安全漏洞

Source

https://github.com/IOActive/AOSP-DownloadProviderHijacker

Associated Vulnerability

Title:Google Android 安全漏洞 (CVE-2018-9468)
Description:In query of DownloadManager.java, there is a possible read/write of arbitrary files due to a permissions bypass. This could lead to local information disclosure and file rewriting with no additional execution privileges needed. User interaction is not needed for exploitation.

Description

PoC Exploiting Permission Bypass in Android's Download Provider (CVE-2018-9468)

Readme

# AOSP-DownloadProviderHijacker
PoC Exploiting Permission Bypass in Android's Download Provider (CVE-2018-9468)

## Security Advisory
https://ioactive.com/wp-content/uploads/2019/04/IOActive-Security-Advisory-Androids-Download-Provider-Permission-Bypass-CVE-2018-9468.pdf

## More Information
https://ioactive.com/multiple-vulnerabilities-in-androids-download-provider-cve-2018-9468-cve-2018-9493-cve-2018-9546/

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →

Goal Reached Thanks to every supporter — we hit 100%!