Sep 14, 2026Hacker News
OEMpocalypse: Unprivileged Android App to Root via OEM Code
The OEMpocalypse strategy offers a novel approach to rooting Android devices from an unprivileged app by targeting OEM-specific code. It bypasses generic Linux and chipset driver complexities, aiming for a stable page Use-After-Free (UAF) primitive in OEM kernel drivers, often after an initial sandbox escape through OEM IPC handlers. This method prioritizes reliability and portability across an OEM's lineup, accepting the trade-off of per-OEM exploitation.
Read →