CVE-2016-8467 PoC — Google Nexus Mediaserver 安全漏洞

Source

https://github.com/roeeh/bootmodechecker

Associated Vulnerability

Title:Google Nexus Mediaserver 安全漏洞 (CVE-2016-8467)
Description:An elevation of privilege vulnerability in the bootloader could enable a local attacker to execute arbitrary modem commands on the device. This issue is rated as High because it is a local permanent denial of service (device interoperability: completely permanent or requiring re-flashing the entire operating system). Product: Android. Versions: N/A. Android ID: A-30308784.

Description

This app checks if you're vulnerable to CVE-2016-8467 and/or if your bootmode property has been tampered with.

Readme

# bootmodechecker
This app checks if your Nexus 6/6P is still vulnerable to [CVE-2016-8467](https://securityresear.ch/2017/01/05/attacking-android-custom-bootmodes/) and/or if your bootmode property has been tampered with.

Also available under Google Play: https://play.google.com/store/apps/details?id=roeeh.bootmodechecker

![tampered](n6p-bootmode-tampered.png)

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →

Goal Reached Thanks to every supporter — we hit 100%!