CVE-2018-9375 PoC — Google Pixel 代码问题漏洞

Source

https://github.com/IOActive/AOSP-ExploitUserDictionary

Associated Vulnerability

Title:Google Pixel 代码问题漏洞 (CVE-2018-9375)
Description:In multiple functions of UserDictionaryProvider.java, there is a possible way to add and delete words in the user dictionary due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

Description

PoC Exploit for AOSP UserDictionary Content Provider (CVE-2018-9375)

Readme

# AOSP-ExploitUserDictionary
PoC Exploit for AOSP UserDictionary Content Provider (CVE-2018-9375)

## Security Advisory
https://ioactive.com/wp-content/uploads/2018/08/IOActive-Security-Advisory-AOSP-UserDictionaryProvider-v1.0.pdf

## More Information
https://ioactive.com/discovering-and-exploiting-a-vulnerability-in-androids-personal-dictionary/

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →

Goal Reached Thanks to every supporter — we hit 100%!