OEMpocalypse Now: A Generic Exploitation Strategy from Android untrusted app to root
This article introduces a novel strategy for gaining root access on popular Android devices. By exploiting a page Use-After-Free in OEM-specific kernel drivers, the author achieves a reliable, portable, and universal method applicable to Samsung, Xiaomi, and Oppo/OnePlus/Realme devices, showcasing the significance of targeting OEM code.