Mobile Security – core-jmp

// Mobile Security

3 posts

Exploiting CVE-2024-1065 via the Page Cache — A Physical-Page UAF in the ARM Mali GPU Driver

CVE-2024-1065 is a physical-page use-after-free in the ARM Mali GPU kernel driver. Because the freed page lands in MIGRATE_MOVABLE, Dirty Pagetable and…

oxfemale· Jun 13· 20 min ·140

Attacking Samsung RKP: Three Bypasses of EL2 Kernel Protection on Exynos Devices

Android135

Android Exploit Development

Attacking Samsung RKP: Three Bypasses of EL2 Kernel Protection on Exynos Devices

An original English rewrite of Alexandre Adamski’s 2021 Impalabs deep dive into Samsung’s Real-time Kernel Protection (RKP). The post walks through three…

oxfemale· May 25· 14 min ·135

Essential iOS Hardening: A Practical Guide to Defending iPhones Against Modern Spyware

Application Security160

Application Security Cybersecurity

Essential iOS Hardening: A Practical Guide to Defending iPhones Against Modern Spyware

A practical, security-engineering view of the essential iOS hardening steps every iPhone user — and especially high-risk targets — should apply: Lockdown…

oxfemale· May 23· 8 min ·160