{"vulnerability": "CVE-2023-3310", "sightings": [{"uuid": "8c3c8976-8ab2-47d8-82bc-04e9e4ca4077", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-33106", "type": "seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "content": "", "creation_timestamp": "2023-12-05T18:10:03.000000Z"}, {"uuid": "cb31c3e6-c8e4-4420-9ad0-97262a081ffe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-33107", "type": "seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "content": "", "creation_timestamp": "2023-12-05T18:10:03.000000Z"}, {"uuid": "fea702c5-dfec-43bb-9688-1ee1093018c1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-33106", "type": "seen", "source": "https://feedsin.space/feed/CISAKevBot/items/2971933", "content": "", "creation_timestamp": "2024-12-24T20:35:48.950102Z"}, {"uuid": "726dbbd9-bd6b-4359-a08f-11236b6bd148", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-33107", "type": "seen", "source": "https://feedsin.space/feed/CISAKevBot/items/2971934", "content": "", "creation_timestamp": "2024-12-24T20:35:49.731997Z"}, {"uuid": "5c03d1d8-97b1-4ca8-9862-0309a04fbfc6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-33106", "type": "seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "content": "", "creation_timestamp": "2025-02-23T02:10:50.000000Z"}, {"uuid": "3c1388e5-59eb-4b58-8077-d2fa3b3c959c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-33107", "type": "seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "content": "", "creation_timestamp": "2025-02-23T02:10:50.000000Z"}, {"uuid": "b38ad890-c8f4-437c-a735-f2f79faa6508", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-33107", "type": "seen", "source": "https://notnow.dev/objects/117da573-866d-4323-8650-4216e58aefd3", "content": "", "creation_timestamp": "2025-05-31T19:58:44.323216Z"}, {"uuid": "669ece27-448d-4b00-bc0b-f85177918a3b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "af0120d0-3dac-4a6a-974b-a9f33d2a9846", "vulnerability": "CVE-2023-33107", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/7f50f113-4836-41dc-9d8f-009110a0f08c", "content": "", "creation_timestamp": "2026-02-02T12:26:44.802231Z"}, {"uuid": "af016dc9-326b-4692-a1cb-0074b8075ff6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "af0120d0-3dac-4a6a-974b-a9f33d2a9846", "vulnerability": "CVE-2023-33106", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/a3cfb216-1cbc-4369-81a8-b02bcdd2e83b", "content": "", "creation_timestamp": "2026-02-02T12:26:44.908368Z"}, {"uuid": "db55965f-6bc5-47fb-955c-2a93c82e51ef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-33106", "type": "seen", "source": "https://t.me/BabukLockerGroups/56634", "content": "REMOTE/\nFirefox RCE\nWindows Low IL to SYSTEM LPE\nSafari RCE\nSamsung Exynos/QMI/QRTR Baseband RCE\niOS 17.4-17.7 Full Chain\niOS 18.0+ Zero-day Full Chain\nAndroid Chrome Full Chain\nAndroid 0-Click RCE via Samsung Messenger\n\n2024:\nFortinet NAC Pre-auth RCE\nClamAV Arbitrary File Upload\nBitdefender Safepay RCE\nRocketChat 1-click RC\nSamsung NVR Pre-auth RCE\nLacie NAS Pre-auth RCE\nSonicWall GMS Pre-auth RCE\nMeta Platforms Inc Identity Spoofing\nTrend Micro Worry Free Pre-auth RCE\nWindows 11 KASLR Bypass\nVMware Workstation VME\nJuniper Firewall/VPN (JunOS) Pre-auth RCE\nMacOS Disk Utility LPE\nMS Word RCE via SMB/WebDAV\nAdobe Reader / Acrobat Pro RCE via SMB/WebDAV\nPHP Pre-auth RCE\nMS Word RCE (via LPE)\nMS Word RCE (via indirect execution)\nMS Word RCE\nKKThai Internet Management System Pre-auth RCE\nCloudPanel Pre-auth RCE\nSonicWall SMA 1000 Series Pre-auth RCE\nFoxit Reader/Editor RCE\nLinksys LRT224/LRT214 Business Router Pre-auth RCE\nnginx RCE\u00a0 TBD\nWindows 10/2016/2019/2022 Low IL to SYSTEM LPE\u00a0 \nWindows LPE+SBX\nCloudPanel 2 Pre-auth RCE\u00a0 TBD\nWindows Medium to SYSTEM LPE\nvBulletin Pre-auth RCE\nWindows Medium to SYSTEM Logic LPE\nWindows Medium to SYSTEM Race Condition LPE\nTor Relay Node Impersonation\u00a0 TBD\nIceWarp Mail Server Pre-auth RCE\u00a0 TBD\nLinux 6.1.0, 6.8.0 LPE\u00a0 TBD\nFortinet FortiSIEM RCE\u00a0 TBD\nFortinet FortiWeb Authentication Bypass\u00a0 TBD\nWindows 10/11/2016/2019/2022 Logic LPE\u00a0 \nOracle Agile PLM Pre-auth RCE\nBusyBox Pre-auth RCE\u00a0 \nLinux LPE 0day (up to 6.1.81)\u00a0 \n\nChrome RCE 1day (Feb 6, 2024)\u00a0 \nFirefox Chain 1day (up to 126)\u00a0 \nSamsung S22/23 1day LPE (CVE-2023-33106)\u00a0 \nAndroid Linux Kernel 5.10-5.15 LPE \nOutlook RCE\u00a0 \nChrome Android/Windows RCE\u00a0 \nChrome Android RCE\u00a0 \niOS 1day Full Chain \nTor Browser/Firefox RCE+SBX\u00a0 \nWindows Low to Medium LPE\u00a0 \nFortinet FortiManager Pre-auth 1day RCE", "creation_timestamp": "2025-08-14T11:19:49.000000Z"}, {"uuid": "bc12863a-2f06-4ffe-aeec-59e417a17cee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-33106", "type": "seen", "source": "https://t.me/BabukLockerGroups/56141", "content": "REMOTE/\nFirefox RCE\nWindows Low IL to SYSTEM LPE\nSafari RCE\nSamsung Exynos/QMI/QRTR Baseband RCE\niOS 17.4-17.7 Full Chain\niOS 18.0+ Zero-day Full Chain\nAndroid Chrome Full Chain\nAndroid 0-Click RCE via Samsung Messenger\n\n2024:\nFortinet NAC Pre-auth RCE\nClamAV Arbitrary File Upload\nBitdefender Safepay RCE\nRocketChat 1-click RC\nSamsung NVR Pre-auth RCE\nLacie NAS Pre-auth RCE\nSonicWall GMS Pre-auth RCE\nMeta Platforms Inc Identity Spoofing\nTrend Micro Worry Free Pre-auth RCE\nWindows 11 KASLR Bypass\nVMware Workstation VME\nJuniper Firewall/VPN (JunOS) Pre-auth RCE\nMacOS Disk Utility LPE\nMS Word RCE via SMB/WebDAV\nAdobe Reader / Acrobat Pro RCE via SMB/WebDAV\nPHP Pre-auth RCE\nMS Word RCE (via LPE)\nMS Word RCE (via indirect execution)\nMS Word RCE\nKKThai Internet Management System Pre-auth RCE\nCloudPanel Pre-auth RCE\nSonicWall SMA 1000 Series Pre-auth RCE\nFoxit Reader/Editor RCE\nLinksys LRT224/LRT214 Business Router Pre-auth RCE\nnginx RCE  TBD\nWindows 10/2016/2019/2022 Low IL to SYSTEM LPE  \nWindows LPE+SBX\nCloudPanel 2 Pre-auth RCE  TBD\nWindows Medium to SYSTEM LPE\nvBulletin Pre-auth RCE\nWindows Medium to SYSTEM Logic LPE\nWindows Medium to SYSTEM Race Condition LPE\nTor Relay Node Impersonation  TBD\nIceWarp Mail Server Pre-auth RCE  TBD\nLinux 6.1.0, 6.8.0 LPE  TBD\nFortinet FortiSIEM RCE  TBD\nFortinet FortiWeb Authentication Bypass  TBD\nWindows 10/11/2016/2019/2022 Logic LPE  \nOracle Agile PLM Pre-auth RCE\nBusyBox Pre-auth RCE  \nLinux LPE 0day (up to 6.1.81)  \n\nChrome RCE 1day (Feb 6, 2024)  \nFirefox Chain 1day (up to 126)  \nSamsung S22/23 1day LPE (CVE-2023-33106)  \nAndroid Linux Kernel 5.10-5.15 LPE \nOutlook RCE  \nChrome Android/Windows RCE  \nChrome Android RCE  \niOS 1day Full Chain \nTor Browser/Firefox RCE+SBX  \nWindows Low to Medium LPE  \nFortinet FortiManager Pre-auth 1day RCE", "creation_timestamp": "2025-08-11T17:10:54.000000Z"}, {"uuid": "7c37e3a2-1710-43c4-9971-dbfd6ef0a045", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-33106", "type": "seen", "source": "https://t.me/BabukLockerGroups/56197", "content": "REMOTE/\nFirefox RCE\nWindows Low IL to SYSTEM LPE\nSafari RCE\nSamsung Exynos/QMI/QRTR Baseband RCE\niOS 17.4-17.7 Full Chain\niOS 18.0+ Zero-day Full Chain\nAndroid Chrome Full Chain\nAndroid 0-Click RCE via Samsung Messenger\n\n2024:\nFortinet NAC Pre-auth RCE\nClamAV Arbitrary File Upload\nBitdefender Safepay RCE\nRocketChat 1-click RC\nSamsung NVR Pre-auth RCE\nLacie NAS Pre-auth RCE\nSonicWall GMS Pre-auth RCE\nMeta Platforms Inc Identity Spoofing\nTrend Micro Worry Free Pre-auth RCE\nWindows 11 KASLR Bypass\nVMware Workstation VME\nJuniper Firewall/VPN (JunOS) Pre-auth RCE\nMacOS Disk Utility LPE\nMS Word RCE via SMB/WebDAV\nAdobe Reader / Acrobat Pro RCE via SMB/WebDAV\nPHP Pre-auth RCE\nMS Word RCE (via LPE)\nMS Word RCE (via indirect execution)\nMS Word RCE\nKKThai Internet Management System Pre-auth RCE\nCloudPanel Pre-auth RCE\nSonicWall SMA 1000 Series Pre-auth RCE\nFoxit Reader/Editor RCE\nLinksys LRT224/LRT214 Business Router Pre-auth RCE\nnginx RCE  TBD\nWindows 10/2016/2019/2022 Low IL to SYSTEM LPE  \nWindows LPE+SBX\nCloudPanel 2 Pre-auth RCE  TBD\nWindows Medium to SYSTEM LPE\nvBulletin Pre-auth RCE\nWindows Medium to SYSTEM Logic LPE\nWindows Medium to SYSTEM Race Condition LPE\nTor Relay Node Impersonation  TBD\nIceWarp Mail Server Pre-auth RCE  TBD\nLinux 6.1.0, 6.8.0 LPE  TBD\nFortinet FortiSIEM RCE  TBD\nFortinet FortiWeb Authentication Bypass  TBD\nWindows 10/11/2016/2019/2022 Logic LPE  \nOracle Agile PLM Pre-auth RCE\nBusyBox Pre-auth RCE  \nLinux LPE 0day (up to 6.1.81)  \n\nChrome RCE 1day (Feb 6, 2024)  \nFirefox Chain 1day (up to 126)  \nSamsung S22/23 1day LPE (CVE-2023-33106)  \nAndroid Linux Kernel 5.10-5.15 LPE \nOutlook RCE  \nChrome Android/Windows RCE  \nChrome Android RCE  \niOS 1day Full Chain \nTor Browser/Firefox RCE+SBX  \nWindows Low to Medium LPE  \nFortinet FortiManager Pre-auth 1day RCE", "creation_timestamp": "2025-08-11T17:11:51.000000Z"}, {"uuid": "bbbfb095-9003-49da-a258-14c388b2711a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-33106", "type": "seen", "source": "https://t.me/BabukLockerGroups/57682", "content": "REMOTE/\nFirefox RCE\nWindows Low IL to SYSTEM LPE\nSafari RCE\nSamsung Exynos/QMI/QRTR Baseband RCE\niOS 17.4-17.7 Full Chain\niOS 18.0+ Zero-day Full Chain\nAndroid Chrome Full Chain\nAndroid 0-Click RCE via Samsung Messenger\n\n2024:\nFortinet NAC Pre-auth RCE\nClamAV Arbitrary File Upload\nBitdefender Safepay RCE\nRocketChat 1-click RC\nSamsung NVR Pre-auth RCE\nLacie NAS Pre-auth RCE\nSonicWall GMS Pre-auth RCE\nMeta Platforms Inc Identity Spoofing\nTrend Micro Worry Free Pre-auth RCE\nWindows 11 KASLR Bypass\nVMware Workstation VME\nJuniper Firewall/VPN (JunOS) Pre-auth RCE\nMacOS Disk Utility LPE\nMS Word RCE via SMB/WebDAV\nAdobe Reader / Acrobat Pro RCE via SMB/WebDAV\nPHP Pre-auth RCE\nMS Word RCE (via LPE)\nMS Word RCE (via indirect execution)\nMS Word RCE\nKKThai Internet Management System Pre-auth RCE\nCloudPanel Pre-auth RCE\nSonicWall SMA 1000 Series Pre-auth RCE\nFoxit Reader/Editor RCE\nLinksys LRT224/LRT214 Business Router Pre-auth RCE\nnginx RCE  TBD\nWindows 10/2016/2019/2022 Low IL to SYSTEM LPE  \nWindows LPE+SBX\nCloudPanel 2 Pre-auth RCE  TBD\nWindows Medium to SYSTEM LPE\nvBulletin Pre-auth RCE\nWindows Medium to SYSTEM Logic LPE\nWindows Medium to SYSTEM Race Condition LPE\nTor Relay Node Impersonation  TBD\nIceWarp Mail Server Pre-auth RCE  TBD\nLinux 6.1.0, 6.8.0 LPE  TBD\nFortinet FortiSIEM RCE  TBD\nFortinet FortiWeb Authentication Bypass  TBD\nWindows 10/11/2016/2019/2022 Logic LPE  \nOracle Agile PLM Pre-auth RCE\nBusyBox Pre-auth RCE  \nLinux LPE 0day (up to 6.1.81)  \n\nChrome RCE 1day (Feb 6, 2024)  \nFirefox Chain 1day (up to 126)  \nSamsung S22/23 1day LPE (CVE-2023-33106)  \nAndroid Linux Kernel 5.10-5.15 LPE \nOutlook RCE  \nChrome Android/Windows RCE  \nChrome Android RCE  \niOS 1day Full Chain \nTor Browser/Firefox RCE+SBX  \nWindows Low to Medium LPE  \nFortinet FortiManager Pre-auth 1day RCE", "creation_timestamp": "2025-08-22T19:43:07.000000Z"}, {"uuid": "2391e11b-046a-43bc-b04d-378dee943967", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-33106", "type": "seen", "source": "https://t.me/RFrepoV1Chat/423482", "content": "REMOTE/\nFirefox RCE\nWindows Low IL to SYSTEM LPE\nSafari RCE\nSamsung Exynos/QMI/QRTR Baseband RCE\niOS 17.4-17.7 Full Chain\niOS 18.0+ Zero-day Full Chain\nAndroid Chrome Full Chain\nAndroid 0-Click RCE via Samsung Messenger\n\n2024:\nFortinet NAC Pre-auth RCE\nClamAV Arbitrary File Upload\nBitdefender Safepay RCE\nRocketChat 1-click RC\nSamsung NVR Pre-auth RCE\nLacie NAS Pre-auth RCE\nSonicWall GMS Pre-auth RCE\nMeta Platforms Inc Identity Spoofing\nTrend Micro Worry Free Pre-auth RCE\nWindows 11 KASLR Bypass\nVMware Workstation VME\nJuniper Firewall/VPN (JunOS) Pre-auth RCE\nMacOS Disk Utility LPE\nMS Word RCE via SMB/WebDAV\nAdobe Reader / Acrobat Pro RCE via SMB/WebDAV\nPHP Pre-auth RCE\nMS Word RCE (via LPE)\nMS Word RCE (via indirect execution)\nMS Word RCE\nKKThai Internet Management System Pre-auth RCE\nCloudPanel Pre-auth RCE\nSonicWall SMA 1000 Series Pre-auth RCE\nFoxit Reader/Editor RCE\nLinksys LRT224/LRT214 Business Router Pre-auth RCE\nnginx RCE  TBD\nWindows 10/2016/2019/2022 Low IL to SYSTEM LPE  \nWindows LPE+SBX\nCloudPanel 2 Pre-auth RCE  TBD\nWindows Medium to SYSTEM LPE\nvBulletin Pre-auth RCE\nWindows Medium to SYSTEM Logic LPE\nWindows Medium to SYSTEM Race Condition LPE\nTor Relay Node Impersonation  TBD\nIceWarp Mail Server Pre-auth RCE  TBD\nLinux 6.1.0, 6.8.0 LPE  TBD\nFortinet FortiSIEM RCE  TBD\nFortinet FortiWeb Authentication Bypass  TBD\nWindows 10/11/2016/2019/2022 Logic LPE  \nOracle Agile PLM Pre-auth RCE\nBusyBox Pre-auth RCE  \nLinux LPE 0day (up to 6.1.81)  \n\nChrome RCE 1day (Feb 6, 2024)  \nFirefox Chain 1day (up to 126)  \nSamsung S22/23 1day LPE (CVE-2023-33106)  \nAndroid Linux Kernel 5.10-5.15 LPE \nOutlook RCE  \nChrome Android/Windows RCE  \nChrome Android RCE  \niOS 1day Full Chain \nTor Browser/Firefox RCE+SBX  \nWindows Low to Medium LPE  \nFortinet FortiManager Pre-auth 1day RCE", "creation_timestamp": "2025-08-11T17:12:00.000000Z"}, {"uuid": "0ba96f8a-6d9c-4d5d-b6af-e89da5744f37", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-33106", "type": "seen", "source": "https://t.me/RFrepoV1Chat/423914", "content": "REMOTE/\nFirefox RCE\nWindows Low IL to SYSTEM LPE\nSafari RCE\nSamsung Exynos/QMI/QRTR Baseband RCE\niOS 17.4-17.7 Full Chain\niOS 18.0+ Zero-day Full Chain\nAndroid Chrome Full Chain\nAndroid 0-Click RCE via Samsung Messenger\n\n2024:\nFortinet NAC Pre-auth RCE\nClamAV Arbitrary File Upload\nBitdefender Safepay RCE\nRocketChat 1-click RC\nSamsung NVR Pre-auth RCE\nLacie NAS Pre-auth RCE\nSonicWall GMS Pre-auth RCE\nMeta Platforms Inc Identity Spoofing\nTrend Micro Worry Free Pre-auth RCE\nWindows 11 KASLR Bypass\nVMware Workstation VME\nJuniper Firewall/VPN (JunOS) Pre-auth RCE\nMacOS Disk Utility LPE\nMS Word RCE via SMB/WebDAV\nAdobe Reader / Acrobat Pro RCE via SMB/WebDAV\nPHP Pre-auth RCE\nMS Word RCE (via LPE)\nMS Word RCE (via indirect execution)\nMS Word RCE\nKKThai Internet Management System Pre-auth RCE\nCloudPanel Pre-auth RCE\nSonicWall SMA 1000 Series Pre-auth RCE\nFoxit Reader/Editor RCE\nLinksys LRT224/LRT214 Business Router Pre-auth RCE\nnginx RCE\u00a0 TBD\nWindows 10/2016/2019/2022 Low IL to SYSTEM LPE\u00a0 \nWindows LPE+SBX\nCloudPanel 2 Pre-auth RCE\u00a0 TBD\nWindows Medium to SYSTEM LPE\nvBulletin Pre-auth RCE\nWindows Medium to SYSTEM Logic LPE\nWindows Medium to SYSTEM Race Condition LPE\nTor Relay Node Impersonation\u00a0 TBD\nIceWarp Mail Server Pre-auth RCE\u00a0 TBD\nLinux 6.1.0, 6.8.0 LPE\u00a0 TBD\nFortinet FortiSIEM RCE\u00a0 TBD\nFortinet FortiWeb Authentication Bypass\u00a0 TBD\nWindows 10/11/2016/2019/2022 Logic LPE\u00a0 \nOracle Agile PLM Pre-auth RCE\nBusyBox Pre-auth RCE\u00a0 \nLinux LPE 0day (up to 6.1.81)\u00a0 \n\nChrome RCE 1day (Feb 6, 2024)\u00a0 \nFirefox Chain 1day (up to 126)\u00a0 \nSamsung S22/23 1day LPE (CVE-2023-33106)\u00a0 \nAndroid Linux Kernel 5.10-5.15 LPE \nOutlook RCE\u00a0 \nChrome Android/Windows RCE\u00a0 \nChrome Android RCE\u00a0 \niOS 1day Full Chain \nTor Browser/Firefox RCE+SBX\u00a0 \nWindows Low to Medium LPE\u00a0 \nFortinet FortiManager Pre-auth 1day RCE", "creation_timestamp": "2025-08-14T11:20:49.000000Z"}, {"uuid": "a20d031c-1682-4994-9845-9a4077e94f70", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-33106", "type": "seen", "source": "https://t.me/RFrepoV1Chat/423426", "content": "REMOTE/\nFirefox RCE\nWindows Low IL to SYSTEM LPE\nSafari RCE\nSamsung Exynos/QMI/QRTR Baseband RCE\niOS 17.4-17.7 Full Chain\niOS 18.0+ Zero-day Full Chain\nAndroid Chrome Full Chain\nAndroid 0-Click RCE via Samsung Messenger\n\n2024:\nFortinet NAC Pre-auth RCE\nClamAV Arbitrary File Upload\nBitdefender Safepay RCE\nRocketChat 1-click RC\nSamsung NVR Pre-auth RCE\nLacie NAS Pre-auth RCE\nSonicWall GMS Pre-auth RCE\nMeta Platforms Inc Identity Spoofing\nTrend Micro Worry Free Pre-auth RCE\nWindows 11 KASLR Bypass\nVMware Workstation VME\nJuniper Firewall/VPN (JunOS) Pre-auth RCE\nMacOS Disk Utility LPE\nMS Word RCE via SMB/WebDAV\nAdobe Reader / Acrobat Pro RCE via SMB/WebDAV\nPHP Pre-auth RCE\nMS Word RCE (via LPE)\nMS Word RCE (via indirect execution)\nMS Word RCE\nKKThai Internet Management System Pre-auth RCE\nCloudPanel Pre-auth RCE\nSonicWall SMA 1000 Series Pre-auth RCE\nFoxit Reader/Editor RCE\nLinksys LRT224/LRT214 Business Router Pre-auth RCE\nnginx RCE  TBD\nWindows 10/2016/2019/2022 Low IL to SYSTEM LPE  \nWindows LPE+SBX\nCloudPanel 2 Pre-auth RCE  TBD\nWindows Medium to SYSTEM LPE\nvBulletin Pre-auth RCE\nWindows Medium to SYSTEM Logic LPE\nWindows Medium to SYSTEM Race Condition LPE\nTor Relay Node Impersonation  TBD\nIceWarp Mail Server Pre-auth RCE  TBD\nLinux 6.1.0, 6.8.0 LPE  TBD\nFortinet FortiSIEM RCE  TBD\nFortinet FortiWeb Authentication Bypass  TBD\nWindows 10/11/2016/2019/2022 Logic LPE  \nOracle Agile PLM Pre-auth RCE\nBusyBox Pre-auth RCE  \nLinux LPE 0day (up to 6.1.81)  \n\nChrome RCE 1day (Feb 6, 2024)  \nFirefox Chain 1day (up to 126)  \nSamsung S22/23 1day LPE (CVE-2023-33106)  \nAndroid Linux Kernel 5.10-5.15 LPE \nOutlook RCE  \nChrome Android/Windows RCE  \nChrome Android RCE  \niOS 1day Full Chain \nTor Browser/Firefox RCE+SBX  \nWindows Low to Medium LPE  \nFortinet FortiManager Pre-auth 1day RCE", "creation_timestamp": "2025-08-11T17:10:59.000000Z"}, {"uuid": "50199c63-85c2-449e-825c-e54dd7953733", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-33106", "type": "seen", "source": "https://t.me/RFrepoV1Chat/424974", "content": "REMOTE/\nFirefox RCE\nWindows Low IL to SYSTEM LPE\nSafari RCE\nSamsung Exynos/QMI/QRTR Baseband RCE\niOS 17.4-17.7 Full Chain\niOS 18.0+ Zero-day Full Chain\nAndroid Chrome Full Chain\nAndroid 0-Click RCE via Samsung Messenger\n\n2024:\nFortinet NAC Pre-auth RCE\nClamAV Arbitrary File Upload\nBitdefender Safepay RCE\nRocketChat 1-click RC\nSamsung NVR Pre-auth RCE\nLacie NAS Pre-auth RCE\nSonicWall GMS Pre-auth RCE\nMeta Platforms Inc Identity Spoofing\nTrend Micro Worry Free Pre-auth RCE\nWindows 11 KASLR Bypass\nVMware Workstation VME\nJuniper Firewall/VPN (JunOS) Pre-auth RCE\nMacOS Disk Utility LPE\nMS Word RCE via SMB/WebDAV\nAdobe Reader / Acrobat Pro RCE via SMB/WebDAV\nPHP Pre-auth RCE\nMS Word RCE (via LPE)\nMS Word RCE (via indirect execution)\nMS Word RCE\nKKThai Internet Management System Pre-auth RCE\nCloudPanel Pre-auth RCE\nSonicWall SMA 1000 Series Pre-auth RCE\nFoxit Reader/Editor RCE\nLinksys LRT224/LRT214 Business Router Pre-auth RCE\nnginx RCE  TBD\nWindows 10/2016/2019/2022 Low IL to SYSTEM LPE  \nWindows LPE+SBX\nCloudPanel 2 Pre-auth RCE  TBD\nWindows Medium to SYSTEM LPE\nvBulletin Pre-auth RCE\nWindows Medium to SYSTEM Logic LPE\nWindows Medium to SYSTEM Race Condition LPE\nTor Relay Node Impersonation  TBD\nIceWarp Mail Server Pre-auth RCE  TBD\nLinux 6.1.0, 6.8.0 LPE  TBD\nFortinet FortiSIEM RCE  TBD\nFortinet FortiWeb Authentication Bypass  TBD\nWindows 10/11/2016/2019/2022 Logic LPE  \nOracle Agile PLM Pre-auth RCE\nBusyBox Pre-auth RCE  \nLinux LPE 0day (up to 6.1.81)  \n\nChrome RCE 1day (Feb 6, 2024)  \nFirefox Chain 1day (up to 126)  \nSamsung S22/23 1day LPE (CVE-2023-33106)  \nAndroid Linux Kernel 5.10-5.15 LPE \nOutlook RCE  \nChrome Android/Windows RCE  \nChrome Android RCE  \niOS 1day Full Chain \nTor Browser/Firefox RCE+SBX  \nWindows Low to Medium LPE  \nFortinet FortiManager Pre-auth 1day RCE", "creation_timestamp": "2025-08-22T19:42:39.000000Z"}, {"uuid": "9818b54e-2d52-4170-b92c-344ffc36121c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-33106", "type": "exploited", "source": "https://t.me/kasperskyb2b/917", "content": "\ud83d\udcf1 Android patch week \ud83d\udcf1 \n\n\u0412 \u043e\u043a\u0442\u044f\u0431\u0440\u044c\u0441\u043a\u043e\u043c \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0438 Android \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u044b 54 \u0443\u044f\u0432\u0437\u0438\u043c\u043e\u0441\u0442\u0438, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0434\u0432\u0435 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c\u044b\u0435. \u041e\u0434\u043d\u0430 \u0438\u0437 \u043d\u0438\u0445 \u2014 \u0443\u0436\u0435 \u0445\u043e\u0440\u043e\u0448\u043e \u0437\u043d\u0430\u043a\u043e\u043c\u0430\u044f \u043d\u0430\u043c CVE-2023-4863 \u0432  libwebp, \u0430 \u0432\u0442\u043e\u0440\u0430\u044f \u2014 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2023-4211 \u0432 \u0434\u0440\u0430\u0439\u0432\u0435\u0440\u0430\u0445 ARM Mali GPU, \u0434\u0435\u0442\u0430\u043b\u0438 \u043f\u0440\u043e \u043a\u043e\u0442\u043e\u0440\u0443\u044e \u043d\u0435 \u0440\u0430\u0437\u0433\u043b\u0430\u0448\u0430\u044e\u0442\u0441\u044f.\n\n\u0414\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u043a \u044d\u0442\u043e\u043c\u0443 \u043e\u0431\u043d\u043e\u0432\u0438\u043b\u0438 \u0441\u0432\u043e\u0438 \u0434\u0440\u0430\u0439\u0432\u0435\u0440\u044b \u0432 Qualcomm, \u0437\u0430\u043a\u0440\u044b\u0432 \u0442\u0440\u0438 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c\u044b\u0445 \u0437\u0438\u0440\u043e\u0434\u0435\u044f (CVE-2023-33106, -33107, -33063) \u0438 \u0443\u0436\u0435 \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u0443\u044e CVE-2022-22071. \u0414\u0435\u0442\u0430\u043b\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043e\u0431\u0435\u0449\u0430\u044e\u0442 \u0432 \u0434\u0435\u043a\u0430\u0431\u0440\u0435 \ud83d\ude0f. \u041f\u043e\u043a\u0430 \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e \u0442\u043e\u043b\u044c\u043a\u043e, \u0447\u0442\u043e \u0434\u044b\u0440\u044b \u043d\u0430\u0439\u0434\u0435\u043d\u044b \u0432 \u0434\u0440\u0430\u0439\u0432\u0435\u0440\u0430\u0445 Adreno GPU \u0438 Compute DSP.  \u0422\u0430\u043a\u0436\u0435 \u0437\u0430\u043a\u0440\u044b\u0442\u044b \u0442\u0440\u0438 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0438 13 \u0432\u0430\u0436\u043d\u044b\u0445, \u044d\u0442\u0438 \u043d\u0435 \u043f\u043e\u0434\u0432\u0435\u0440\u0433\u0430\u043b\u0438\u0441\u044c \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438.\n\n\u041a\u0430\u043a \u0432\u043e\u0434\u0438\u0442\u0441\u044f, \u0432\u043b\u0430\u0434\u0435\u043b\u044c\u0446\u044b Google Pixel \u0438 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 \u0441 AOSP (\u0432\u0435\u0440\u0441\u0438\u0438 \u0441 11 \u043f\u043e 13) \u0443\u0436\u0435 \u043c\u043e\u0433\u0443\u0442 \u0441\u043a\u0430\u0447\u0438\u0432\u0430\u0442\u044c \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f, \u043e\u0441\u0442\u0430\u043b\u044c\u043d\u044b\u0435 \u0436\u0434\u0443\u0442, \u043f\u043e\u043a\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f\u043c\u0438 \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0438 \u0440\u0430\u0437\u0440\u043e\u0434\u044f\u0442\u0441\u044f \u0438\u0445 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0438 \u0441\u043c\u0430\u0440\u0442\u0444\u043e\u043d\u043e\u0432.\n\n#\u043d\u043e\u0432\u043e\u0441\u0442\u0438 @\u041f2\u0422", "creation_timestamp": "2023-10-04T10:12:19.000000Z"}, {"uuid": "331aa9be-2f97-43ff-904a-070e80593abb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-33107", "type": "seen", "source": "https://t.me/arpsyndicate/2148", "content": "#ExploitObserverAlert\n\nCVE-2023-33107\n\nDESCRIPTION: Exploit Observer has 1 entries related to CVE-2023-33107. Memory corruption in Graphics Linux while assigning shared virtual memory region during IOCTL call.\n\nFIRST-EPSS: 0.000640000\nNVD-IS: 5.9\nNVD-ES: 1.8", "creation_timestamp": "2023-12-24T03:56:35.000000Z"}, {"uuid": "195e363b-9007-435f-8067-1d4a85fe4e75", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-33106", "type": "seen", "source": "https://t.me/arpsyndicate/2147", "content": "#ExploitObserverAlert\n\nCVE-2023-33106\n\nDESCRIPTION: Exploit Observer has 1 entries related to CVE-2023-33106. Memory corruption while submitting a large list of sync points in an AUX command to the IOCTL_KGSL_GPU_AUX_COMMAND.\n\nFIRST-EPSS: 0.000640000\nNVD-IS: 5.9\nNVD-ES: 1.8", "creation_timestamp": "2023-12-24T03:50:39.000000Z"}, {"uuid": "189ab14b-b243-451d-8cc4-28ac0a806a4a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-33109", "type": "seen", "source": "https://t.me/cibsecurity/74158", "content": "\u203c\ufe0fCVE-2023-33109\u203c\ufe0f\n\nTransient DOS while processing a WMI P2P listen start command 0xD00A sent from host.\n\n\ud83d\udcd6 Read more\n\nVia \"National Vulnerability Database\"", "creation_timestamp": "2024-01-03T01:33:45.000000Z"}, {"uuid": "bc25750e-9739-4dc5-b74d-8e791d9bf721", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-33108", "type": "seen", "source": "https://t.me/cibsecurity/74157", "content": "\u203c\ufe0fCVE-2023-33108\u203c\ufe0f\n\nMemory corruption in Graphics Driver when destroying a context with KGSLGPUAUXCOMMANDTIMELINE objects queued.\n\n\ud83d\udcd6 Read more\n\nVia \"National Vulnerability Database\"", "creation_timestamp": "2024-01-03T01:33:41.000000Z"}, {"uuid": "5da6292b-690a-468a-8026-d89ce7af674d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-33107", "type": "exploited", "source": "Telegram/Rxu4zo-zqPtpxwJhXuMIjF4FHa6_XqkwC7R1LNZHIISepQ", "content": "", "creation_timestamp": "2023-10-03T19:17:46.000000Z"}, {"uuid": "c3d0075e-33bd-4d81-bc21-bb7dbd44820f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-33106", "type": "exploited", "source": "Telegram/Rxu4zo-zqPtpxwJhXuMIjF4FHa6_XqkwC7R1LNZHIISepQ", "content": "", "creation_timestamp": "2023-10-03T19:17:46.000000Z"}, {"uuid": "fd0bd32c-f35b-45ce-9696-a3185fd551ca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-33106", "type": "seen", "source": "Telegram/Aa2S6d-4frJmlOWLinLoLgvxlenNWPaSIISorRj7DUbwFQ", "content": "", "creation_timestamp": "2023-12-06T09:07:04.000000Z"}, {"uuid": "8ad6e9f4-dfd3-4c69-b0c4-e955acd68e88", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-33106", "type": "seen", "source": "https://t.me/KomunitiSiber/1171", "content": "Qualcomm Releases Details on Chip Vulnerabilities Exploited in Targeted Attacks\nhttps://thehackernews.com/2023/12/qualcomm-releases-details-on-chip.html\n\nChipmaker Qualcomm has released more information about three high-severity security flaws that it said came under \"limited, targeted exploitation\" back in October 2023.\nThe\u00a0vulnerabilities\u00a0are as follows -\n\nCVE-2023-33063\u00a0(CVSS score: 7.8) - Memory corruption in DSP Services during a remote call from HLOS to DSP.\nCVE-2023-33106\u00a0(CVSS score: 8.4) - Memory corruption in", "creation_timestamp": "2023-12-06T06:47:45.000000Z"}, {"uuid": "ffa28b0c-37e8-4882-af29-5b035df58af7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-33107", "type": "exploited", "source": "https://t.me/KomunitiSiber/881", "content": "Qualcomm Releases Patch for 3 new Zero-Days Under Active Exploitation\nhttps://thehackernews.com/2023/10/qualcomm-releases-patch-for-3-new-zero.html\n\nChipmaker Qualcomm has released security updates to address 17 vulnerabilities in various components, while warning that three other zero-days have come under active exploitation.\nOf the 17 flaws, three are rated Critical, 13 are rated High, and one is rated Medium in severity.\n\"There are indications from Google Threat Analysis Group and Google Project Zero that CVE-2023-33106, CVE-2023-33107,", "creation_timestamp": "2023-10-03T19:23:21.000000Z"}, {"uuid": "a845b311-9f83-42a5-9d7f-a33c6a7e212c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-33106", "type": "exploited", "source": "https://t.me/KomunitiSiber/881", "content": "Qualcomm Releases Patch for 3 new Zero-Days Under Active Exploitation\nhttps://thehackernews.com/2023/10/qualcomm-releases-patch-for-3-new-zero.html\n\nChipmaker Qualcomm has released security updates to address 17 vulnerabilities in various components, while warning that three other zero-days have come under active exploitation.\nOf the 17 flaws, three are rated Critical, 13 are rated High, and one is rated Medium in severity.\n\"There are indications from Google Threat Analysis Group and Google Project Zero that CVE-2023-33106, CVE-2023-33107,", "creation_timestamp": "2023-10-03T19:23:21.000000Z"}, {"uuid": "b969c997-57ab-4468-9343-09c9f6278d5b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-33106", "type": "seen", "source": "https://t.me/true_secator/4924", "content": "Qualcomm \u0438\u0441\u043f\u0440\u0430\u0432\u0438\u043b\u0430 \u0431\u043e\u043b\u0435\u0435 \u0434\u0432\u0443\u0445 \u0434\u0435\u0441\u044f\u0442\u043a\u043e\u0432 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0432 \u0442\u043e\u043c \u0447\u0438\u0441\u043b\u0435 \u0442\u0440\u0438 0-day \u0432 \u0441\u0432\u043e\u0438\u0445 \u0434\u0440\u0430\u0439\u0432\u0435\u0440\u0430\u0445 \u0433\u0440\u0430\u0444\u0438\u0447\u0435\u0441\u043a\u043e\u0433\u043e \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u0430 \u0438 Compute DSP, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438\u0441\u044c \u043f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a\u0430\u043c\u0438 spyware.\n\n\u041e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u043d\u0443\u044e \u0446\u0435\u043b\u0435\u0432\u0443\u044e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044e CVE-2023-33106, CVE-2023-33107, CVE-2022-22071 \u0438 CVE-2023-33063 \u0437\u0430\u043c\u0435\u0442\u0438\u043b\u0438 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 Google (TAG) \u0438 Project Zero, \u043e \u0447\u0435\u043c \u043f\u0440\u043e\u0438\u043d\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043b\u0438 Qualcomm.\n\n\u041f\u0440\u0438\u0447\u0435\u043c CVE-2022-22071 (CVSS v3.1: 8.4) \u0431\u044b\u043b\u0430\u00a0\u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 \u0435\u0449\u0435 \u0432 \u043c\u0430\u0435 2022 \u0433\u043e\u0434\u0430 \u0438 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u043e\u0431\u043e\u0439 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u043f\u043e\u0441\u043b\u0435 \u043e\u0441\u0432\u043e\u0431\u043e\u0436\u0434\u0435\u043d\u0438\u044f, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044f \u0442\u0430\u043a\u0438\u0435 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u044b\u0435 \u0447\u0438\u043f\u044b, \u043a\u0430\u043a SD855, SD865 5G \u0438 SD888 5G.\n\n\u041f\u043e \u0434\u0440\u0443\u0433\u0438\u043c \u0438\u0437 \u043d\u0438\u0445 Qualcomm \u043d\u0435 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b\u0430 \u043d\u0438\u043a\u0430\u043a\u0438\u0445 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0435\u0439, \u043e\u0431\u0435\u0449\u0430\u044f \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u044c \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u0443\u044e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e \u0432 \u0441\u0432\u043e\u0435\u043c \u0431\u044e\u043b\u043b\u0435\u0442\u0435\u043d\u0435 \u0437\u0430 \u0434\u0435\u043a\u0430\u0431\u0440\u044c 2023 \u0433\u043e\u0434\u0430.\n\n\u0412 \u044d\u0442\u043e\u043c \u043c\u0435\u0441\u044f\u0446\u0435 \u0442\u0430\u043a\u0436\u0435 \u0431\u044b\u043b\u0438 \u0437\u0430\u043a\u0440\u044b\u0442\u044b \u0442\u0440\u0438 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u0430, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0436\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e:\n\n- CVE-2023-24855: \u043f\u043e\u0432\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u0435 \u043f\u0430\u043c\u044f\u0442\u0438 \u0432 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0435 \u043c\u043e\u0434\u0435\u043c\u0430 \u043f\u0440\u0438 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0435 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0439, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0445 \u0441 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c\u044e (CVSS v3.1: 9.8);\n\n- CVE-2023-28540: \u043a\u0440\u0438\u043f\u0442\u043e\u0433\u0440\u0430\u0444\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0432 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0435 \u043c\u043e\u0434\u0435\u043c\u0430 \u0434\u0430\u043d\u043d\u044b\u0445, \u0432\u043e\u0437\u043d\u0438\u043a\u0430\u044e\u0449\u0430\u044f \u0438\u0437-\u0437\u0430 \u043d\u0435\u043f\u0440\u0430\u0432\u0438\u043b\u044c\u043d\u043e\u0439 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0432\u043e \u0432\u0440\u0435\u043c\u044f \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0441\u0432\u044f\u0437\u0438 TLS (CVSS v3.1: 9.1);\n\n- CVE-2023-33028: \u043f\u043e\u0432\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u0435 \u043f\u0430\u043c\u044f\u0442\u0438 \u0432 \u043c\u0438\u043a\u0440\u043e\u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u0435 WLAN, \u0432\u043e\u0437\u043d\u0438\u043a\u0430\u044e\u0449\u0435\u0435 \u043f\u0440\u0438 \u043a\u043e\u043f\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0438 \u043a\u044d\u0448-\u043f\u0430\u043c\u044f\u0442\u0438 pmk \u0431\u0435\u0437 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u0440\u0430\u0437\u043c\u0435\u0440\u0430 (CVSS v3.1: 9.8).\n\n\u041f\u043e\u043c\u0438\u043c\u043e \u043f\u0435\u0440\u0435\u0447\u0438\u0441\u043b\u0435\u043d\u043d\u044b\u0445 Qualcomm \u0438\u0441\u043f\u0440\u0430\u0432\u0438\u043b\u0430 13 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u0445 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u043e\u0432 \u0438 \u0435\u0449\u0435 \u0442\u0440\u0438 \u0434\u0440\u0443\u0433\u0438\u0435 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u0435 \u0435\u0435 \u0438\u043d\u0436\u0435\u043d\u0435\u0440\u0430\u043c\u0438.\n\n\u0411\u043e\u043b\u044c\u0448\u0438\u043d\u0441\u0442\u0432\u043e \u0438\u0437 \u043d\u0438\u0445 \u0432\u043b\u0438\u044f\u044e\u0442 \u043d\u0430 \u043c\u043e\u0434\u0435\u043c\u044b, \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0443 WLAN \u0438 \u0430\u0432\u0442\u043e\u043c\u043e\u0431\u0438\u043b\u044c\u043d\u044b\u0435 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u044b, \u0438 \u0431\u044b\u043b\u0438 \u043e\u043f\u0438\u0441\u0430\u043d\u044b \u043a\u0430\u043a \u043e\u0448\u0438\u0431\u043a\u0438 \u043f\u0430\u043c\u044f\u0442\u0438 \u0438 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u0441 \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u0435\u043c \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438. \u041e\u0448\u0438\u0431\u043a\u0438 \u043f\u0430\u043c\u044f\u0442\u0438, \u043a\u0430\u043a \u043f\u0440\u0430\u0432\u0438\u043b\u043e, \u043c\u043e\u0433\u0443\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a RCE \u0438\u043b\u0438 DoS.\n\n\u041f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044c \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0441 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435\u043c \u043f\u0440\u043e\u0431\u043b\u0435\u043c, \u0443\u0432\u0435\u0434\u043e\u043c\u0438\u0432 \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u044b\u0445 OEM-\u043f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a\u043e\u0432, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0443\u0436\u0435, \u0432 \u0441\u0432\u043e\u044e \u043e\u0447\u0435\u0440\u0435\u0434\u044c, \u0434\u043e\u043b\u0436\u043d\u044b \u0440\u0435\u0442\u0440\u0430\u043d\u0441\u043b\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0434\u043e \u043a\u043e\u043d\u0435\u0447\u043d\u044b\u0445 \u043f\u043e\u0442\u0440\u0435\u0431\u0438\u0442\u0435\u043b\u0435\u0439 \u0447\u0435\u0440\u0435\u0437 OEM-\u043a\u0430\u043d\u0430\u043b\u044b.", "creation_timestamp": "2023-10-04T13:13:09.000000Z"}, {"uuid": "66def074-ea36-4a7d-8a93-11473d804587", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-33107", "type": "seen", "source": "https://t.me/true_secator/4924", "content": "Qualcomm \u0438\u0441\u043f\u0440\u0430\u0432\u0438\u043b\u0430 \u0431\u043e\u043b\u0435\u0435 \u0434\u0432\u0443\u0445 \u0434\u0435\u0441\u044f\u0442\u043a\u043e\u0432 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0432 \u0442\u043e\u043c \u0447\u0438\u0441\u043b\u0435 \u0442\u0440\u0438 0-day \u0432 \u0441\u0432\u043e\u0438\u0445 \u0434\u0440\u0430\u0439\u0432\u0435\u0440\u0430\u0445 \u0433\u0440\u0430\u0444\u0438\u0447\u0435\u0441\u043a\u043e\u0433\u043e \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u0430 \u0438 Compute DSP, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438\u0441\u044c \u043f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a\u0430\u043c\u0438 spyware.\n\n\u041e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u043d\u0443\u044e \u0446\u0435\u043b\u0435\u0432\u0443\u044e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044e CVE-2023-33106, CVE-2023-33107, CVE-2022-22071 \u0438 CVE-2023-33063 \u0437\u0430\u043c\u0435\u0442\u0438\u043b\u0438 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 Google (TAG) \u0438 Project Zero, \u043e \u0447\u0435\u043c \u043f\u0440\u043e\u0438\u043d\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043b\u0438 Qualcomm.\n\n\u041f\u0440\u0438\u0447\u0435\u043c CVE-2022-22071 (CVSS v3.1: 8.4) \u0431\u044b\u043b\u0430\u00a0\u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 \u0435\u0449\u0435 \u0432 \u043c\u0430\u0435 2022 \u0433\u043e\u0434\u0430 \u0438 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u043e\u0431\u043e\u0439 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u043f\u043e\u0441\u043b\u0435 \u043e\u0441\u0432\u043e\u0431\u043e\u0436\u0434\u0435\u043d\u0438\u044f, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044f \u0442\u0430\u043a\u0438\u0435 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u044b\u0435 \u0447\u0438\u043f\u044b, \u043a\u0430\u043a SD855, SD865 5G \u0438 SD888 5G.\n\n\u041f\u043e \u0434\u0440\u0443\u0433\u0438\u043c \u0438\u0437 \u043d\u0438\u0445 Qualcomm \u043d\u0435 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b\u0430 \u043d\u0438\u043a\u0430\u043a\u0438\u0445 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0435\u0439, \u043e\u0431\u0435\u0449\u0430\u044f \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u044c \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u0443\u044e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e \u0432 \u0441\u0432\u043e\u0435\u043c \u0431\u044e\u043b\u043b\u0435\u0442\u0435\u043d\u0435 \u0437\u0430 \u0434\u0435\u043a\u0430\u0431\u0440\u044c 2023 \u0433\u043e\u0434\u0430.\n\n\u0412 \u044d\u0442\u043e\u043c \u043c\u0435\u0441\u044f\u0446\u0435 \u0442\u0430\u043a\u0436\u0435 \u0431\u044b\u043b\u0438 \u0437\u0430\u043a\u0440\u044b\u0442\u044b \u0442\u0440\u0438 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u0430, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0436\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e:\n\n- CVE-2023-24855: \u043f\u043e\u0432\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u0435 \u043f\u0430\u043c\u044f\u0442\u0438 \u0432 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0435 \u043c\u043e\u0434\u0435\u043c\u0430 \u043f\u0440\u0438 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0435 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0439, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0445 \u0441 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c\u044e (CVSS v3.1: 9.8);\n\n- CVE-2023-28540: \u043a\u0440\u0438\u043f\u0442\u043e\u0433\u0440\u0430\u0444\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0432 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0435 \u043c\u043e\u0434\u0435\u043c\u0430 \u0434\u0430\u043d\u043d\u044b\u0445, \u0432\u043e\u0437\u043d\u0438\u043a\u0430\u044e\u0449\u0430\u044f \u0438\u0437-\u0437\u0430 \u043d\u0435\u043f\u0440\u0430\u0432\u0438\u043b\u044c\u043d\u043e\u0439 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0432\u043e \u0432\u0440\u0435\u043c\u044f \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0441\u0432\u044f\u0437\u0438 TLS (CVSS v3.1: 9.1);\n\n- CVE-2023-33028: \u043f\u043e\u0432\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u0435 \u043f\u0430\u043c\u044f\u0442\u0438 \u0432 \u043c\u0438\u043a\u0440\u043e\u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u0435 WLAN, \u0432\u043e\u0437\u043d\u0438\u043a\u0430\u044e\u0449\u0435\u0435 \u043f\u0440\u0438 \u043a\u043e\u043f\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0438 \u043a\u044d\u0448-\u043f\u0430\u043c\u044f\u0442\u0438 pmk \u0431\u0435\u0437 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u0440\u0430\u0437\u043c\u0435\u0440\u0430 (CVSS v3.1: 9.8).\n\n\u041f\u043e\u043c\u0438\u043c\u043e \u043f\u0435\u0440\u0435\u0447\u0438\u0441\u043b\u0435\u043d\u043d\u044b\u0445 Qualcomm \u0438\u0441\u043f\u0440\u0430\u0432\u0438\u043b\u0430 13 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u0445 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u043e\u0432 \u0438 \u0435\u0449\u0435 \u0442\u0440\u0438 \u0434\u0440\u0443\u0433\u0438\u0435 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u0435 \u0435\u0435 \u0438\u043d\u0436\u0435\u043d\u0435\u0440\u0430\u043c\u0438.\n\n\u0411\u043e\u043b\u044c\u0448\u0438\u043d\u0441\u0442\u0432\u043e \u0438\u0437 \u043d\u0438\u0445 \u0432\u043b\u0438\u044f\u044e\u0442 \u043d\u0430 \u043c\u043e\u0434\u0435\u043c\u044b, \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0443 WLAN \u0438 \u0430\u0432\u0442\u043e\u043c\u043e\u0431\u0438\u043b\u044c\u043d\u044b\u0435 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u044b, \u0438 \u0431\u044b\u043b\u0438 \u043e\u043f\u0438\u0441\u0430\u043d\u044b \u043a\u0430\u043a \u043e\u0448\u0438\u0431\u043a\u0438 \u043f\u0430\u043c\u044f\u0442\u0438 \u0438 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u0441 \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u0435\u043c \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438. \u041e\u0448\u0438\u0431\u043a\u0438 \u043f\u0430\u043c\u044f\u0442\u0438, \u043a\u0430\u043a \u043f\u0440\u0430\u0432\u0438\u043b\u043e, \u043c\u043e\u0433\u0443\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a RCE \u0438\u043b\u0438 DoS.\n\n\u041f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044c \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0441 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435\u043c \u043f\u0440\u043e\u0431\u043b\u0435\u043c, \u0443\u0432\u0435\u0434\u043e\u043c\u0438\u0432 \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u044b\u0445 OEM-\u043f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a\u043e\u0432, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0443\u0436\u0435, \u0432 \u0441\u0432\u043e\u044e \u043e\u0447\u0435\u0440\u0435\u0434\u044c, \u0434\u043e\u043b\u0436\u043d\u044b \u0440\u0435\u0442\u0440\u0430\u043d\u0441\u043b\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0434\u043e \u043a\u043e\u043d\u0435\u0447\u043d\u044b\u0445 \u043f\u043e\u0442\u0440\u0435\u0431\u0438\u0442\u0435\u043b\u0435\u0439 \u0447\u0435\u0440\u0435\u0437 OEM-\u043a\u0430\u043d\u0430\u043b\u044b.", "creation_timestamp": "2023-10-04T13:13:09.000000Z"}, {"uuid": "965b18fe-4ebb-49e4-b49c-ada0b8ceb4bb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-33104", "type": "seen", "source": "https://t.me/ctinow/199201", "content": "https://ift.tt/7XVZDT3\nCVE-2023-33104", "creation_timestamp": "2024-03-04T12:32:14.000000Z"}, {"uuid": "82f825a2-e455-43f4-bcbb-a5ac720cfcb9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-33103", "type": "seen", "source": "https://t.me/ctinow/199200", "content": "https://ift.tt/zgx3rRN\nCVE-2023-33103", "creation_timestamp": "2024-03-04T12:32:12.000000Z"}, {"uuid": "02d4302d-0de7-4a97-9879-1db1336906e0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-33105", "type": "seen", "source": "https://t.me/ctinow/199202", "content": "https://ift.tt/hExeo8A\nCVE-2023-33105", "creation_timestamp": "2024-03-04T12:32:15.000000Z"}, {"uuid": "8f8df95a-90f7-4a89-b6f0-86be06d6df8b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-33108", "type": "seen", "source": "https://t.me/ctinow/171255", "content": "https://ift.tt/mYMklR5\nCVE-2023-33108 | Qualcomm WSA8835 Graphics Driver memory corruption", "creation_timestamp": "2024-01-22T16:13:59.000000Z"}, {"uuid": "ddaf032f-8d94-4ee2-906a-b73fb4e6c8ed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-33108", "type": "seen", "source": "https://t.me/ctinow/161531", "content": "https://ift.tt/chmJTrD\nCVE-2023-33108", "creation_timestamp": "2024-01-02T07:27:11.000000Z"}, {"uuid": "f9500036-e3ab-4514-9bb4-58e6e439b673", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-33109", "type": "seen", "source": "https://t.me/ctinow/161532", "content": "https://ift.tt/S8fUPbE\nCVE-2023-33109", "creation_timestamp": "2024-01-02T07:27:12.000000Z"}, {"uuid": "f9b57eb2-05b2-4195-b238-8339ce656472", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-33107", "type": "seen", "source": "https://t.me/ctinow/158830", "content": "https://ift.tt/MeqQxzA\nCVE-2023-33107 | Qualcomm 4 Gen 1 Mobile Platform IOCTL Call memory corruption", "creation_timestamp": "2023-12-23T14:41:35.000000Z"}, {"uuid": "47b17fe1-adb4-4524-b30e-bb647909400c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-33106", "type": "seen", "source": "https://t.me/ctinow/158829", "content": "https://ift.tt/iGXKIe1\nCVE-2023-33106 | Qualcomm 4 Gen 1 Mobile Platform IOCTL_KGSL_GPU_AUX_COMMAND memory corruption", "creation_timestamp": "2023-12-23T14:41:34.000000Z"}, {"uuid": "7b18b867-9060-44a5-a428-30cc3e8a799f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-33107", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/9456", "content": "#exploit\n1. CVE-2023-4207:\nLinux kernel net/sched/cls_fw.c - UaF\nhttps://github.com/nidhi7598/linux-4.19.72_net_CVE-2023-4207\n\n2. CVE-2023-49103:\nownCloud graphapi GetPhpInfo.php - information disclosure\nhttps://github.com/creacitysec/CVE-2023-49103\n\n3. CVE-2023-33106/CVE-2023-33107:\nQualcomm Adreno GPU OOB/Integer overflow\nhttps://googleprojectzero.github.io/0days-in-the-wild//0day-RCAs/2023/CVE-2023-33106.html\nhttps://googleprojectzero.github.io/0days-in-the-wild//0day-RCAs/2023/CVE-2023-33107.html", "creation_timestamp": "2023-11-24T13:41:56.000000Z"}, {"uuid": "024e50f6-0542-4215-a30e-819027c65884", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-33106", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/9456", "content": "#exploit\n1. CVE-2023-4207:\nLinux kernel net/sched/cls_fw.c - UaF\nhttps://github.com/nidhi7598/linux-4.19.72_net_CVE-2023-4207\n\n2. CVE-2023-49103:\nownCloud graphapi GetPhpInfo.php - information disclosure\nhttps://github.com/creacitysec/CVE-2023-49103\n\n3. CVE-2023-33106/CVE-2023-33107:\nQualcomm Adreno GPU OOB/Integer overflow\nhttps://googleprojectzero.github.io/0days-in-the-wild//0day-RCAs/2023/CVE-2023-33106.html\nhttps://googleprojectzero.github.io/0days-in-the-wild//0day-RCAs/2023/CVE-2023-33107.html", "creation_timestamp": "2023-11-24T13:41:56.000000Z"}, {"uuid": "9db63d92-901b-427c-a6e8-3bb34dab300f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-33106", "type": "published-proof-of-concept", "source": "https://t.me/Rootsec_2/2037", "content": "#exploit\n1. CVE-2023-4207:\nLinux kernel net/sched/cls_fw.c - UaF\nhttps://github.com/nidhi7598/linux-4.19.72_net_CVE-2023-4207\n\n2. CVE-2023-49103:\nownCloud graphapi GetPhpInfo.php - information disclosure\nhttps://github.com/creacitysec/CVE-2023-49103\n\n3. CVE-2023-33106/CVE-2023-33107:\nQualcomm Adreno GPU OOB/Integer overflow\nhttps://googleprojectzero.github.io/0days-in-the-wild//0day-RCAs/2023/CVE-2023-33106.html\nhttps://googleprojectzero.github.io/0days-in-the-wild//0day-RCAs/2023/CVE-2023-33107.html", "creation_timestamp": "2024-08-16T08:51:13.000000Z"}, {"uuid": "920b03d8-e287-4f2b-a07d-583e02536375", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-33107", "type": "published-proof-of-concept", "source": "https://t.me/Rootsec_2/2037", "content": "#exploit\n1. CVE-2023-4207:\nLinux kernel net/sched/cls_fw.c - UaF\nhttps://github.com/nidhi7598/linux-4.19.72_net_CVE-2023-4207\n\n2. CVE-2023-49103:\nownCloud graphapi GetPhpInfo.php - information disclosure\nhttps://github.com/creacitysec/CVE-2023-49103\n\n3. CVE-2023-33106/CVE-2023-33107:\nQualcomm Adreno GPU OOB/Integer overflow\nhttps://googleprojectzero.github.io/0days-in-the-wild//0day-RCAs/2023/CVE-2023-33106.html\nhttps://googleprojectzero.github.io/0days-in-the-wild//0day-RCAs/2023/CVE-2023-33107.html", "creation_timestamp": "2024-08-16T08:51:13.000000Z"}, {"uuid": "e771af9a-f38d-44ec-909b-2fa10e2b464c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-33107", "type": "seen", "source": "https://gist.github.com/KRW0090/166c655e59c71f63be65acf67641b33d", "content": "# SH-03M (docomo\u30ad\u30c3\u30ba\u30b1\u30fc\u30bf\u30a4) Root\u5316\u8abf\u67fb\u30ce\u30fc\u30c8\n\n> \u672c\u30c9\u30ad\u30e5\u30e1\u30f3\u30c8\u306f\u3001NTT docomo\u306e\u30ad\u30c3\u30ba\u30b1\u30fc\u30bf\u30a4 **SH-03M**\uff08\u30b7\u30e3\u30fc\u30d7\u88fd / Snapdragon 210 / MSM8909\uff09\u306e root \u53d6\u5f97\u3092\u8a66\u307f\u305f\u8abf\u67fb\u306e\u5168\u8a18\u9332\u3067\u3059\u3002\n> \u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u7814\u7a76\u30fb\u6559\u80b2\u76ee\u7684\u3067\u4f5c\u6210\u3057\u307e\u3057\u305f\u3002\u8a18\u8f09\u5185\u5bb9\u3092\u5b9f\u6a5f\u3067\u518d\u73fe\u3059\u308b\u969b\u306f\u81ea\u5df1\u8cac\u4efb\u3067\u304a\u9858\u3044\u3057\u307e\u3059\u3002\n\n## \u514d\u8cac\u4e8b\u9805\n\n- \u672c\u30c9\u30ad\u30e5\u30e1\u30f3\u30c8\u306f\u8abf\u67fb\u8a18\u9332\u3067\u3042\u308a\u3001root\u5316\u306e\u300c\u6210\u529f\u624b\u9806\u300d\u3067\u306f\u3042\u308a\u307e\u305b\u3093\uff08\u73fe\u6642\u70b9\u3067 root \u53d6\u5f97\u306b\u306f\u81f3\u3063\u3066\u3044\u307e\u305b\u3093\uff09\u3002\n- \u8a18\u8f09\u306e\u64cd\u4f5c\u306f\u7aef\u672b\u3092\u7834\u640d\u30fb\u6587\u93ae\u5316\u3055\u305b\u308b\u53ef\u80fd\u6027\u304c\u3042\u308a\u307e\u3059\u3002\u5b9f\u65bd\u306f\u81ea\u5df1\u8cac\u4efb\u3067\u3059\u3002\n- eSIM \u3092\u5229\u7528\u3057\u3066\u3044\u308b\u7aef\u672b\u3067\u306f\u3001\u30ea\u30ab\u30d0\u30ea\u30fc\u30e2\u30fc\u30c9\u304b\u3089\u306e\u521d\u671f\u5316\u306b\u3088\u308a eSIM \u60c5\u5831\u304c\u5931\u308f\u308c\u3001\u518d\u767a\u884c\u304c\u5fc5\u8981\u306b\u306a\u308b\u5834\u5408\u304c\u3042\u308a\u307e\u3059\u3002\n\n---\n\n## 1. \u7aef\u672b\u6982\u8981\n\n| \u9805\u76ee | \u5024 |\n|---|---|\n| \u578b\u756a | SH-03M\uff08docomo \u30ad\u30c3\u30ba\u30b1\u30fc\u30bf\u30a4\uff09 |\n| SoC | Qualcomm Snapdragon 210 / 212\uff08**MSM8909**, 32bit ARM\uff09 |\n| GPU | Adreno 304\uff08KGSL \u30c9\u30e9\u30a4\u30d0\uff09 |\n| RAM | 889 MB\uff08\u5b9f\u6e2c\uff09 |\n| ROM | 8 GB eMMC |\n| Android | 8.1.0 (SDK 27, OPM1.171019.026) |\n| \u30ab\u30fc\u30cd\u30eb | Linux 3.18.71-perf\uff082023\u301c2025 \u5e74\u518d\u30d3\u30eb\u30c9\uff09 |\n| \u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30d1\u30c3\u30c1 | 2019-08-01 |\n| \u30ea\u30ea\u30fc\u30b9 | 2020-01-17 |\n\n### \u30d5\u30a1\u30fc\u30e0\u30a6\u30a7\u30a2\uff08\u78ba\u8a8d\u3057\u305f4\u53f0\u306e\u5b9f\u6a5f\uff09\n\n| \u30b7\u30ea\u30a2\u30eb\u672b\u5c3e | \u30d3\u30eb\u30c9 | \u30d3\u30eb\u30c9\u65e5 | \u5099\u8003 |\n|---|---|---|---|\n| 2C0503416 | 00WW_2_240 | 2025-05-29 | 1\u53f0\u76ee |\n| C140100594 | 00WW_2_230 | 2025-01-20 | 2\u53f0\u76ee |\n| C1302866 | 00WW_2_220 | 2023-03-23 | 3\u53f0\u76ee\uff08\u30ea\u30ab\u30d0\u30ea\u30fc\u3067\u521d\u671f\u5316\uff09 |\n| C110401206 | 00WW_2_220 | 2023-03-23 | 4\u53f0\u76ee |\n\n\u3059\u3079\u3066\u306e\u30d5\u30a1\u30fc\u30e0\u306f `ro.build.user=cm`, `ro.build.host=cm-build-40-18`, `ro.build.flavor=OE6_00WW_FIH-user` \u3067\u3001**\u500b\u4eba/\u5de5\u5834\u304c\u30d3\u30eb\u30c9\u3057\u305f\u30ab\u30b9\u30bf\u30e0ROM** \u3068\u63a8\u5b9a\u3055\u308c\u308b\u3002\n\n### \u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u72b6\u614b\n\n```\nro.build.type=user\nro.debuggable=0\nro.secure=1\nro.adb.secure=1\nro.boot.flash.locked=1\nro.boot.verifiedbootstate=green\nro.boot.veritymode=enforcing\nro.boot.securityfused=true\nro.oem_unlock_supported=true  (\u3060\u304c unlock \u4e0d\u53ef)\nselinux=Enforcing\n/data = f2fs + dm-crypt\n```\n\n---\n\n## 2. \u8a66\u884c\u3057\u305f\u30eb\u30fc\u30c8\u3068\u7d50\u679c\u30b5\u30de\u30ea\n\n| # | \u30eb\u30fc\u30c8 | \u7d50\u679c | \u8a73\u7d30 |\n|---|---|---|---|\n| 1 | \u30d6\u30fc\u30c8\u30ed\u30fc\u30c0\u30fc\u30a2\u30f3\u30ed\u30c3\u30af (fastboot oem) | **\u4e0d\u53ef** | `oem unlock` \u304c `oem unlock is not allowed`\u3002`flashing get_unlock_ability` = 0 |\n| 2 | EDL (9008) + firehose \u66f8\u304d\u8fbc\u307f | **\u4e0d\u53ef** | \u7f72\u540d\u4ed8\u304d firehose \u304c\u5b58\u5728\u3057\u306a\u3044\uff08PK_HASH \u4e0d\u4e00\u81f4\uff09 |\n| 3 | \u65e2\u77e5\u30ab\u30fc\u30cd\u30eb CVE (binder\u7cfb) | **\u4fee\u6b63\u6e08\u307f** | CVE-2019-2215 / 2020-0041 / 2020-0423 \u306f\u30b7\u30e3\u30fc\u30d7\u30bd\u30fc\u30b9\u3067\u4fee\u6b63\u78ba\u8a8d |\n| 4 | kgsl SVM \u8106\u5f31\u6027 (11261/33107) | **32bit\u3067\u306f\u4e0d\u53ef** | 64bit\u524d\u63d0\u306e\u30e9\u30c3\u30d7\u30a2\u30e9\u30a6\u30f3\u30c9\u624b\u6cd5\u304c32bit\u3067\u6570\u5b66\u7684\u306b\u6210\u7acb\u3057\u306a\u3044 |\n| 5 | kgsl dmabuf UAF (11239) | **\u975e\u8a72\u5f53** | kernel 3.18 \u306f\u65b0 ION ABI (4.12+) \u3067\u306f\u306a\u304f\u975e\u8a72\u5f53 |\n| 6 | \u30b7\u30b9\u30c6\u30e0\u30a2\u30d7\u30ea\u6a29\u9650\u6607\u683c | **\u4e0d\u53ef** | \u5f37\u6a29\u9650\u306f signature \u4fdd\u8b77\u3002\u7121\u4fdd\u8b77 Provider \u306f\u4f4e\u5f71\u97ff\u306e\u307f |\n| 7 | \u30ab\u30fc\u30cd\u30eb\u30e2\u30b8\u30e5\u30fc\u30eb\u30ed\u30fc\u30c9 | **\u4e0d\u53ef** | `insmod` \u304c\u975eroot\u3067\u62d2\u5426 |\n| 8 | adb root | **\u4e0d\u53ef** | production builds |\n| 9 | \u30ea\u30ab\u30d0\u30ea\u30fc\u30e2\u30fc\u30c9\u521d\u671f\u5316 | **\u6210\u529f** | \u4fdd\u8b77\u8005\u30d1\u30b9\u30ef\u30fc\u30c9\u89e3\u9664\u306b\u306f\u6709\u52b9\uff08root\u5316\u3068\u306f\u7121\u95a2\u4fc2\uff09 |\n\n---\n\n## 3. \u30d6\u30fc\u30c8\u30ed\u30fc\u30c0\u30fc\u89e3\u6790\n\n### 3.1 Download mode\uff08fastboot \u30d7\u30ed\u30c8\u30b3\u30eb\uff09\n\n`adb reboot bootloader` \u3067\u5165\u308b\u30e2\u30fc\u30c9\u3002USB \u306f `0489:C009` \u3068\u3057\u3066\u8a8d\u8b58\u3055\u308c\u308b\u3002\n\n- \u6a19\u6e96 fastboot \u5b9f\u88c5\uff08\u9577\u3055\u30d7\u30ec\u30d5\u30a3\u30c3\u30af\u30b9\u7121\u3057\u306e\u751f\u30b3\u30de\u30f3\u30c9\uff09\u3067\u5fdc\u7b54\u3059\u308b\n- `getvar:all` \u304c\u52d5\u4f5c\u3057\u3001\u30d1\u30fc\u30c6\u30a3\u30b7\u30e7\u30f3\u60c5\u5831\u30fbunlock \u72b6\u614b\u3092\u8fd4\u3059\n- Google \u6a19\u6e96\u306e `fastboot.exe` \u306f VID 0489 \u3092\u8a8d\u8b58\u3057\u306a\u3044\u305f\u3081\u3001libusb \u7d4c\u7531\u306e\u81ea\u4f5c\u30af\u30e9\u30a4\u30a2\u30f3\u30c8\u3067\u30a2\u30af\u30bb\u30b9\n\n**\u4e3b\u306a getvar \u7d50\u679c:**\n\n```\nversion: 0.5\nunlocked: no\nsecure: yes\nvariant: OE6 eMMC\nkernel: lk\nproduct: MSM8909\n```\n\n### 3.2 OEM \u30b3\u30de\u30f3\u30c9\n\n\u8a8d\u8b58\u3055\u308c\u308b\u30b3\u30de\u30f3\u30c9\uff08\u4e00\u90e8\uff09:\n\n| \u30b3\u30de\u30f3\u30c9 | \u7d50\u679c |\n|---|---|\n| `oem device-info` | `Device unlocked: false, tampered: false, critical unlocked: false` |\n| `oem lock-state info` | `Device already : locked!` |\n| `oem unlock-go` / `oem unlock` | `oem unlock is not allowed` |\n| `flashing get_unlock_ability` | `get_unlock_ability: 0` |\n| `oem off-mode-charge 0` | OKAY\uff08\u66f8\u304d\u8fbc\u307f\u7cfb\u306f\u4e00\u90e8\u52d5\u4f5c\uff09 |\n\n**\u7d50\u8ad6:** docomo \u7aef\u672b\u306e\u8a2d\u8a08\u3069\u304a\u308a\u3001`get_unlock_ability=0` \u3067\u3042\u308a\u516c\u5f0f\u30a2\u30f3\u30ed\u30c3\u30af\u4e0d\u53ef\u3002devinfo \u30d1\u30fc\u30c6\u30a3\u30b7\u30e7\u30f3\u306e `unlock_ability` \u66f8\u304d\u63db\u3048\u306b\u306f root \u304c\u5fc5\u8981\uff08\u5faa\u74b0\uff09\u3002\n\n### 3.3 EDL (9008) \u30e2\u30fc\u30c9\n\n`adb reboot edl` \u3067 **\u771f\u306e Qualcomm 9008 EDL** \u306b\u5165\u308c\u308b\u3053\u3068\u3092\u78ba\u8a8d\uff08\u30b3\u30df\u30e5\u30cb\u30c6\u30a3\u5831\u544a\u3068\u7570\u306a\u308b\u91cd\u8981\u306a\u767a\u898b\uff09\u3002\n\n- USB: `05C6:9008`\n- Sahara \u30cf\u30f3\u30c9\u30b7\u30a7\u30a4\u30af\u6210\u529f\uff08HWID / PK_HASH / \u30b7\u30ea\u30a2\u30eb\u53d6\u5f97\u53ef\uff09\n\n**\u53d6\u5f97\u3057\u305f\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u60c5\u5831:**\n\n```\nHWID:     0x0096e10000380000 (MSM8909, OEM=0x3800=Sharp)\nPK_HASH:  0eed6924 362cf06a 1ce75b3c 57aabca4 360f7eb5 0dc6d59b ddfc4117 e6cff0ad\nSerial:   0x234c46e0\n```\n\n**firehose \u63a2\u7d22\u7d50\u679c:**\n- bkerler/edl \u306e `root_cert_hash` \u306b `0eed6924` \u306f\u542b\u307e\u308c\u305a\uff08fused \u30c7\u30d0\u30a4\u30b9\u78ba\u5b9a\uff09\n- temblast \u306e\u5168\u30b3\u30ec\u30af\u30b7\u30e7\u30f3\uff082000+\uff09\u306b\u3082 `0eed6924` \u7f72\u540d\u306e\u30ed\u30fc\u30c0\u30fc\u306f\u5b58\u5728\u3057\u306a\u3044\n- \u6c4e\u7528 MSM8909 \u30ed\u30fc\u30c0\u30fc\uff08SecTools \u30c6\u30b9\u30c8\u7f72\u540d\uff09\u306f\u7f72\u540d\u691c\u8a3c\u3067\u62d2\u5426\n\n**\u7d50\u8ad6:** \u30bb\u30ad\u30e5\u30a2\u30d6\u30fc\u30c8\u6709\u52b9 + \u5c02\u7528\u7f72\u540d\u9375\u306e firehose \u304c\u975e\u516c\u958b\u306e\u305f\u3081\u3001EDL \u66f8\u304d\u8fbc\u307f\u306f\u4e0d\u53ef\u80fd\u3002\n\n---\n\n## 4. \u30ab\u30fc\u30cd\u30eb CVE \u8abf\u67fb\n\n\u30b7\u30e3\u30fc\u30d7\u516c\u5f0f OSS \u30bd\u30fc\u30b9\uff08V1.350 / V2.110\uff09\u3068\u5b9f\u6a5f\u30ab\u30fc\u30cd\u30eb\u3092\u7167\u5408\u3002\n\n### 4.1 binder \u7cfb\uff08\u5168\u3066\u4fee\u6b63\u6e08\u307f\uff09\n\n| CVE | \u5185\u5bb9 | \u30b7\u30e3\u30fc\u30d7\u30bd\u30fc\u30b9\u3067\u306e\u4fee\u6b63 |\n|---|---|---|\n| CVE-2019-2215 | binder UAF (POLLFREE) | V1.350 \u304b\u3089 `wake_up_poll(&thread->wait, POLLHUP \\| POLLFREE)` \u3042\u308a |\n| CVE-2020-0041 | binder OOB write | `off_start = ALIGN(tr->data_size, ...)` \u3042\u308a |\n| CVE-2020-0423 | binder UAF (\u30ec\u30fc\u30b9) | `binder_dequeue_work_head_ilocked` \u4f7f\u7528\u3067\u4fee\u6b63 |\n\n### 4.2 kgsl\uff08GPU\uff09\u7cfb\n\n| CVE | \u5185\u5bb9 | \u672c\u7aef\u672b\u3067\u306e\u8a55\u4fa1 |\n|---|---|---|\n| CVE-2020-11261 | SVM \u9818\u57df\u306e\u7bc4\u56f2\u30c1\u30a7\u30c3\u30af\u4e0d\u5099 | \u30bd\u30fc\u30b9\u4e0a\u306f\u672a\u4fee\u6b63\u3060\u304c\u3001**32bit \u3067\u306f global range (0xf8000000) \u306b\u30e6\u30fc\u30b6\u30fc\u304c\u5230\u9054\u4e0d\u53ef**\u306e\u305f\u3081\u5b9f\u7528\u4e0d\u53ef |\n| CVE-2023-33107 | gpuobj_import \u6574\u6570\u30aa\u30fc\u30d0\u30fc\u30d5\u30ed\u30fc | \u30bd\u30fc\u30b9\u4e0a\u306f\u672a\u4fee\u6b63\u3060\u304c\u3001**32bit size_t \u3067\u306f\u30e9\u30c3\u30d7\u304c\u6570\u5b66\u7684\u306b\u4e0d\u53ef\u80fd** |\n| CVE-2020-11239 | dmabuf import UAF | **kernel 3.18 \u306f\u65b0 ION ABI (4.12+) \u975e\u8a72\u5f53** |\n\n### 4.3 \u5b9f\u6a5f\u3067\u306e kgsl \u52d5\u4f5c\u78ba\u8a8d\n\n`/dev/kgsl-3d0` \u306f **rw-rw-rw-**\uff08\u5168\u30a2\u30af\u30bb\u30b9\u53ef\u80fd\u3001\u901a\u5e38\u306e Android \u3067\u306f\u7570\u4f8b\uff09\u3002\n\nNDK (r21e) \u3067 ARM32 \u30af\u30ed\u30b9\u30b3\u30f3\u30d1\u30a4\u30eb\u3057\u305f\u81ea\u4f5c\u30d7\u30ed\u30fc\u30d6\u3067\u78ba\u8a8d:\n\n```\nKGSL_PROP_VERSION: drv=3.14 dev=3.1\nKGSL_PROP_DEVICE_INFO: chip_id=0x3000400 (Adreno 304)\n```\n\n- `IOCTL_KGSL_GPUOBJ_IMPORT` (KGSL_USER_MEM_TYPE_ADDR + USE_CPU_MAP) \u306f\u6210\u529f \u2192 SVM \u633f\u5165\u304c\u52d5\u4f5c\n- `TASK_SIZE = 0xC0000000` \u3067\u3001global range \u306b\u306f\u30e6\u30fc\u30b6\u30fc\u304c mmap \u4e0d\u53ef\n- \u5de8\u5927\u30b5\u30a4\u30ba\u306f `memdesc_sg_virt` \u306e\u5272\u308a\u5f53\u3066\u3067 ENOMEM\n\n---\n\n## 5. \u30b7\u30b9\u30c6\u30e0\u30a2\u30d7\u30ea\u89e3\u6790\n\ndocomo OSV (FOTA) \u30a2\u30d7\u30ea\u3092\u542b\u3080\u5168 priv-app \u3092\u53d6\u5f97\u3057\u3001jadx / baksmali \u3067\u89e3\u6790\u3002\n\n### 5.1 \u30d1\u30fc\u30df\u30c3\u30b7\u30e7\u30f3\u4fdd\u8b77\u30ec\u30d9\u30eb\n\n| \u30d1\u30fc\u30df\u30c3\u30b7\u30e7\u30f3 | \u4fdd\u8b77\u30ec\u30d9\u30eb |\n|---|---|\n| FOTA_REBOOT | signature |\n| OSV_REGISTRY | signature |\n| ACCESS_CONTENT_PROVIDER | signatureOrSystem |\n| RECV_PARENT_APP_EDITING_MSG | signature / signatureOrSystem |\n| KIDS_COMMON_PHRASE | signature |\n\n**\u5f37\u6a29\u9650\u306f\u5168\u3066\u7f72\u540d\u4fdd\u8b77**\u3055\u308c\u3066\u304a\u308a\u3001\u5916\u90e8\u30a2\u30d7\u30ea\u304b\u3089\u306e\u596a\u53d6\u306f\u4e0d\u53ef\u3002\n\n### 5.2 \u7121\u4fdd\u8b77\u30b3\u30f3\u30dd\u30fc\u30cd\u30f3\u30c8\n\n- `KidsHome` \u306e `ClockSettingProvider`\uff08authorities: jp.co.sharp.android.kids.kidshome.setting\uff09\u2014 exported, \u7121\u4fdd\u8b77\n- `schedule` \u306e `WidgetProvider` \u2014 exported, \u7121\u4fdd\u8b77\n\n\u3044\u305a\u308c\u3082\u6642\u8a08/\u30b9\u30b1\u30b8\u30e5\u30fc\u30eb\u8a2d\u5b9a\u306e\u307f\u3067\u3001\u6a29\u9650\u6607\u683c\u306b\u306f\u4f7f\u3048\u306a\u3044\u3002\n\n### 5.3 docomo OSV \u30a2\u30d7\u30ea\n\n- DEX \u7121\u3057\u3001\u30cd\u30a4\u30c6\u30a3\u30d6 OMA-DM \u30a8\u30f3\u30b8\u30f3\uff08`libdmclientengine.so`\u3001\u5bcc\u58eb\u901a\u7cfb\uff09\n- FOTA \u306f\u8a8d\u8a3c\u4ed8\u304d\u30fb\u6697\u53f7\u5316\u30c0\u30a6\u30f3\u30ed\u30fc\u30c9\n- \u30a2\u30c3\u30d7\u30c7\u30fc\u30c8\u306f\u5dee\u5206 OTA \u3067\u3042\u308a\u3001firehose (EDL programmer) \u306f\u542b\u307e\u308c\u306a\u3044\n- **FOTA \u304b\u3089\u306e root \u5316\u6750\u6599\u53d6\u5f97\u306f\u4e0d\u53ef**\n\n---\n\n## 6. \u5b9f\u6a5f\u3067\u4f7f\u3048\u308b\u30c4\u30fc\u30eb\u30fb\u60c5\u5831\n\n### 6.1 fastboot \u81ea\u4f5c\u30af\u30e9\u30a4\u30a2\u30f3\u30c8\uff08libusb\uff09\n\nSH-03M \u306e Download mode (`0489:C009`) \u306f Google fastboot \u304c\u8a8d\u8b58\u3057\u306a\u3044\u305f\u3081\u3001Python + libusb \u3067\u30a2\u30af\u30bb\u30b9\u3059\u308b\u3002\n\n```python\nimport usb.core, usb.util\nfrom usb.backend import libusb1\nbackend = libusb1.get_backend(find_library=lambda x: \"libusb-1.0.dll\")\ndev = usb.core.find(idVendor=0x0489, idProduct=0xC009, backend=backend)\n# \u751f\u30b3\u30de\u30f3\u30c9\u9001\u4fe1\uff08getvar/oem \u306f\u9577\u3055\u30d7\u30ec\u30d5\u30a3\u30c3\u30af\u30b9\u7121\u3057\uff09\n```\n\n### 6.2 EDL (9008) \u30af\u30e9\u30a4\u30a2\u30f3\u30c8\n\nbkerler/edl \u304c\u305d\u306e\u307e\u307e\u4f7f\u3048\u308b\u3002Sahara \u30cf\u30f3\u30c9\u30b7\u30a7\u30a4\u30af\u3067 HWID/PK_HASH \u3092\u53d6\u5f97\u53ef\u80fd\u3002\n\n```\npython edl.py --debugmode printgpt\n```\n\n\uff08firehose \u304c\u7121\u3044\u305f\u3081\u3001\u5148\u3078\u306f\u9032\u3081\u306a\u3044\uff09\n\n### 6.3 \u30ea\u30ab\u30d0\u30ea\u30fc\u30e2\u30fc\u30c9\uff08\u4fdd\u8b77\u8005\u30d1\u30b9\u30ef\u30fc\u30c9\u89e3\u9664\uff09\n\n1. **\u96fb\u6e90\u30dc\u30bf\u30f3\uff08\u4e0a\u90e8\uff09** \u3068 **\u30de\u30ca\u30fc\u30ad\u30fc\uff08\u53f3\u5074\uff09** \u3092\u540c\u6642\u306b10\u79d2\u4ee5\u4e0a\u9577\u62bc\u3057\n2. docomo \u30ed\u30b4\u8868\u793a\u3067\u96fb\u6e90\u30dc\u30bf\u30f3\u304b\u3089\u6307\u3092\u96e2\u3059\n3. 1\u56de\u632f\u52d5\u5f8c\u3001\u30de\u30ca\u30fc\u30ad\u30fc\u3092\u62bc\u3057\u305f\u307e\u307e\u96fb\u6e90\u30dc\u30bf\u30f3\u3092\u7d20\u65e9\u304f3\u56de\u62bc\u3059\n4. \u30ea\u30ab\u30d0\u30ea\u30fc\u30e1\u30cb\u30e5\u30fc\u8868\u793a \u2192 \u300cWipe data/factory reset\u300d\u2192\u300cFactory Reset\u300d\u2192\u300cOK\u300d\n\n\u203b \u5168\u30c7\u30fc\u30bf\uff08eSIM \u542b\u3080\uff09\u304c\u6d88\u3048\u308b\u3002\u4fdd\u8b77\u8005\u30d1\u30b9\u30ef\u30fc\u30c9\u4e0d\u660e\u306e\u7aef\u672b\u306e\u521d\u671f\u5316\u306b\u6709\u52b9\u3002\n\n---\n\n## 7. Fuzzing\uff08\u9032\u884c\u4e2d\uff09\n\n\u672a\u516c\u958b\u8106\u5f31\u6027\u306e\u63a2\u7d22\u3068\u3057\u3066\u3001\u4ee5\u4e0b\u3092\u8a08\u753b\u30fb\u5b9f\u884c\u4e2d\u3002\n\n### 7.1 \u5bfe\u8c61\u30c9\u30e9\u30a4\u30d0\n\n| \u30c7\u30d0\u30a4\u30b9 | \u30d1\u30fc\u30df\u30c3\u30b7\u30e7\u30f3 | \u512a\u5148\u5ea6 |\n|---|---|---|\n| `/dev/kgsl-3d0` | rw-rw-rw-\uff08\u5168\u30a2\u30af\u30bb\u30b9\u53ef\uff09 | \u2605\u2605\u2605 |\n| `/dev/binder` | rw-rw-rw- | \u2605\u2605 |\n| `/dev/diag` | system:fota \u6240\u6709 | \u2605\uff08\u8981\u6a29\u9650\u78ba\u8a8d\uff09 |\n| `/dev/ion` | rw-rw-r-- | \u2605 |\n\n### 7.2 \u65b9\u91dd\n\n- kernel 3.18 / 32bit ARM \u5411\u3051\u306e syzkaller \u306f\u30bb\u30c3\u30c8\u30a2\u30c3\u30d7\u304c\u91cd\u3044\u305f\u3081\u3001**\u81ea\u4f5c\u306e\u8efd\u91cf ioctl fuzzer** \u3092\u512a\u5148\n- \u5404\u30c9\u30e9\u30a4\u30d0\u306e ioctl \u306b\u5909\u7570\u5165\u529b\u3092\u9001\u308a\u3001**\u30af\u30e9\u30c3\u30b7\u30e5 (kernel panic / watchdog / reboot)** \u3092\u691c\u77e5\n- \u30af\u30e9\u30c3\u30b7\u30e5\u691c\u77e5\u6642\u306f pstore / last_kmsg \u304b\u3089\u30ed\u30b0\u3092\u56de\u53ce\u3057\u3001\u539f\u56e0\u3092\u89e3\u6790\n- \u767a\u898b\u3057\u305f\u8106\u5f31\u6027 \u2192 exploit \u5316\uff08\u9577\u671f\uff09\n\n### 7.3 \u9032\u6357\u30fb\u6210\u679c\n\n**\u5b9f\u884c\u6e08\u307f fuzzer\uff08\u81ea\u4f5c\u3001NDK\u3067ARM32\u30af\u30ed\u30b9\u30b3\u30f3\u30d1\u30a4\u30eb\uff09:**\n\n| fuzzer | \u5bfe\u8c61 | \u7d50\u679c |\n|---|---|---|\n| kgsl_fuzz | \u30e9\u30f3\u30c0\u30e0ioctl | 10\u4e07\u56de\u30af\u30e9\u30c3\u30b7\u30e5\u306a\u3057 |\n| kgsl_fuzz2 | drawctxt+gpuobj+GPU_COMMAND | \u6709\u52b9\u306a\u72b6\u614b\u3067\u306e\u63a2\u7d22 |\n| kgsl_fuzz3 | \u6709\u52b9\u72b6\u614b+\u5909\u7570\u5f15\u6570 | **GPUOBJ_ALLOC\u3067\u30af\u30e9\u30c3\u30b7\u30e5** |\n| kgsl_fuzz_case | \u30b1\u30fc\u30b9\u5206\u96e2 | **\u30b1\u30fc\u30b95\uff08GPUOBJ_ALLOC\uff09\u3067\u30af\u30e9\u30c3\u30b7\u30e5\u7279\u5b9a** |\n| kgsl_alloc_* | \u30af\u30e9\u30c3\u30b7\u30e5\u5883\u754c\u63a2\u7d22 | \u3057\u304d\u3044\u5024\u7279\u5b9a |\n| kgsl_fuzz4 | fence/event | \u30af\u30e9\u30c3\u30b7\u30e5\u306a\u3057\uff08fence\u306f\u5805\u7262\uff09 |\n\n**\u767a\u898b\u3057\u305f\u30af\u30e9\u30c3\u30b7\u30e5\uff08DoS\uff09:**\n\n`IOCTL_KGSL_GPUOBJ_ALLOC` \u3067 `size >= 0x16000000`\uff08\u7d04352MB\uff09\u3092\u6307\u5b9a\u3059\u308b\u3068**\u30ab\u30fc\u30cd\u30eb\u304c\u30af\u30e9\u30c3\u30b7\u30e5\u3057\u7aef\u672b\u304c\u518d\u8d77\u52d5**\u3059\u308b\u3002\n\n- \u518d\u73fe\u6027: \u9ad8\uff08\u8907\u6570\u56de\u78ba\u8a8d\uff09\n- \u3057\u304d\u3044\u5024: `0x15000000`\uff08336MB\uff09\u6210\u529f / `0x16000000`\uff08352MB\uff09\u30af\u30e9\u30c3\u30b7\u30e5\n- \u6027\u8cea: **OOM/\u30e1\u30e2\u30ea\u67af\u6e07\u306b\u3088\u308b\u30ab\u30fc\u30cd\u30eb\u30d1\u30cb\u30c3\u30af\u3068\u63a8\u5b9a**\uff08DoS\uff09\n- \u6a29\u9650\u6607\u683c\u3078\u306e\u5229\u7528: **\u975e\u73fe\u5b9f\u7684**\uff08\u30e1\u30e2\u30ea\u7834\u58ca\u3067\u306f\u306a\u304f\u67af\u6e07\u306e\u305f\u3081\uff09\n\n**kgsl \u8abf\u67fb\u3067\u5224\u660e\u3057\u305f\u4e8b\u5b9f:**\n- `/dev/kgsl-3d0` \u306f `rw-rw-rw-`\uff08\u5168\u30a2\u30af\u30bb\u30b9\u53ef\u3001\u901a\u5e38\u306eAndroid\u3067\u306f\u7570\u4f8b\uff09\n- \u30c9\u30e9\u30a4\u30d0: KGSL 3.14 / Adreno 304\n- SVM \u633f\u5165\uff08USE_CPU_MAP\uff09\u306f\u52d5\u4f5c\u3059\u308b\u304c\u300132bit\u3067\u306f\u30e9\u30c3\u30d7\u4e0d\u53ef\n- drawctxt \u4f5c\u6210\u306b\u306f `PREAMBLE | NO_GMEM_ALLOC` \u306e\u4e21\u30d5\u30e9\u30b0\u304c\u5fc5\u9808\n\n**fuzzing\u306e\u9650\u754c:**\n- \u30af\u30e9\u30c3\u30b7\u30e5\u30ed\u30b0\uff08pstore/last_kmsg\uff09\u306f\u975eroot\u3067\u8aad\u3081\u306a\u3044\n- \u30af\u30e9\u30c3\u30b7\u30e5\u306e\u305f\u3073\u306b\u7aef\u672b\u518d\u8d77\u52d5\uff08\u7d041\u5206\uff09\u304c\u767a\u751f\u3057\u3001\u63a2\u7d22\u52b9\u7387\u304c\u4f4e\u3044\n- \u30a2\u30af\u30bb\u30b9\u53ef\u80fd\u306a\u30c7\u30d0\u30a4\u30b9\u306f kgsl \u306e\u307f\uff08diag/ion/adsprpc \u306fSELinux\u5236\u9650\uff09\n\n---\n\n## 8. \u7d50\u8ad6\n\n**SH-03M\uff08docomo\u30ad\u30c3\u30ba\u30b1\u30fc\u30bf\u30a4\uff09\u306eroot\u5316\u306f\u3001\u672c\u8abf\u67fb\u306e\u7bc4\u56f2\u3067\u306f\u5b9f\u73fe\u624b\u6bb5\u304c\u78ba\u8a8d\u3067\u304d\u306a\u304b\u3063\u305f\u3002**\n\n### \u8a66\u884c\u3057\u305f\u5168\u30eb\u30fc\u30c8\u3068\u6700\u7d42\u7d50\u679c\n\n| \u30eb\u30fc\u30c8 | \u6700\u7d42\u7d50\u679c |\n|---|---|\n| \u30d6\u30fc\u30c8\u30ed\u30fc\u30c0\u30fc\u30a2\u30f3\u30ed\u30c3\u30af | \u62d2\u5426\uff08unlock_ability=0\uff09 |\n| EDL + firehose | \u5c02\u7528\u7f72\u540d\u9375\u304c\u975e\u516c\u958b\u3067\u4e0d\u53ef\u80fd |\n| \u65e2\u77e5\u30ab\u30fc\u30cd\u30ebCVE | \u5168\u3066\u4fee\u6b63\u6e08\u307f |\n| \u30b7\u30b9\u30c6\u30e0\u30a2\u30d7\u30ea\u6607\u683c | signature\u4fdd\u8b77\u3067\u4e0d\u53ef |\n| kgsl fuzzing | DoS\u306e\u307f\u767a\u898b\u3001root\u6607\u683c\u306b\u975e\u73fe\u5b9f\u7684 |\n| \u30ab\u30fc\u30cd\u30eb\u30e2\u30b8\u30e5\u30fc\u30eb | \u975eroot\u3067\u4e0d\u53ef |\n\n### \u6839\u672c\u7684\u306a\u8981\u56e0\n\n1. **\u30bb\u30ad\u30e5\u30a2\u30d6\u30fc\u30c8 + \u7f72\u540d\u4ed8\u304d\u30d6\u30fc\u30c8\u30ed\u30fc\u30c0\u30fc**\uff08PK_HASH `0eed6924` \u306e\u5c02\u7528\u9375\u304c\u975e\u516c\u958b\uff09\n2. **\u4e3b\u8981\u306a\u65e2\u77e5CVE\u304c\u5168\u3066\u4fee\u6b63\u6e08\u307f**\uff08\u30b7\u30e3\u30fc\u30d7\u304c2019\u5e74\u6642\u70b9\u3067binder\u7cfb\u3092\u4fee\u6b63\uff09\n3. **\u5f37\u56fa\u306aSELinux\u30dd\u30ea\u30b7\u30fc**\uff08kgsl\u4ee5\u5916\u306e\u653b\u6483\u9762\u3092\u906e\u65ad\uff09\n4. **32bit ARM\u306e\u5236\u7d04**\uff0864bit\u524d\u63d0\u306eexploit\u624b\u6cd5\u304c\u591a\u6570\u5229\u7528\u4e0d\u53ef\uff09\n\n### \u6b8b\u308b\u53ef\u80fd\u6027\uff08\u672a\u5b9f\u65bd\uff09\n\n- **\u30bc\u30ed\u30c7\u30a4\u7684\u8106\u5f31\u6027\u306e\u9577\u671f\u7684\u306a\u63a2\u7d22**\uff08\u6570\u9031\u9593\u301c\u6570\u30f6\u6708\u898f\u6a21\u306e\u7814\u7a76\uff09\n- **root\u6a29\u9650\u3092\u5fc5\u8981\u3068\u3057\u306a\u3044\u4ee3\u66ff\u624b\u6bb5**\uff08ADB\u3067\u306e\u30ab\u30b9\u30bf\u30de\u30a4\u30ba\u7b49\uff09\n\n## 9. \u4ed8\u9332: \u4f5c\u6210\u3057\u305f\u30c4\u30fc\u30eb\n\n\u672c\u8abf\u67fb\u3067\u4f5c\u6210\u3057\u305f\u30c4\u30fc\u30eb\uff08\u3059\u3079\u3066\u9694\u96e2\u74b0\u5883\u3067\u958b\u767a\u30fb\u30c6\u30b9\u30c8\uff09\uff1a\n\n- `kgsl_probe.c` - KGSL\u30d0\u30fc\u30b8\u30e7\u30f3/\u30c7\u30d0\u30a4\u30b9\u60c5\u5831\u53d6\u5f97\n- `kgsl_cve_test*.c` - CVE\u30c8\u30ea\u30ac\u30fc\u691c\u8a3c\n- `kgsl_fuzz*.c` - kgsl ioctl fuzzer\uff084\u4e16\u4ee3\uff09\n- `kgsl_alloc_*.c` - \u30af\u30e9\u30c3\u30b7\u30e5\u5883\u754c\u63a2\u7d22\n- `fb_*.py` - fastboot \u81ea\u4f5c\u30af\u30e9\u30a4\u30a2\u30f3\u30c8\uff08Download mode\u7528\uff09\n\n---\n\n## 10. \u53c2\u8003\u30ea\u30f3\u30af\n\n- \u30b7\u30e3\u30fc\u30d7 OSS \u516c\u958b: https://k-tai.sharp.co.jp/support/developers/oss/sh03m/index.html\n- bkerler/edl: https://github.com/bkerler/edl\n- temblast loaders: https://www.temblast.com/ref/loaders.htm\n- CVE-2020-11261: https://securitylab.github.com/advisories/GHSL-2020-374-kgsl/\n- CVE-2020-11239: https://securitylab.github.com/advisories/GHSL-2020-375-kgsl/\n- CVE-2023-33107 RCA: https://googleprojectzero.github.io/0days-in-the-wild/0day-RCAs/2023/CVE-2023-33107.html\n", "creation_timestamp": "2026-08-03T18:50:47.695854Z"}, {"uuid": "cedeacd7-9a5e-4696-9524-51fdba8c0cc7", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-33106", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/6ba97c41-084c-4362-b775-28bee55f8b8e", "content": "", "creation_timestamp": "2026-06-19T12:46:44.918299Z"}, {"uuid": "68853c92-9731-4a63-96df-c730cfcd90e4", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-33107", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/e6dcfefd-aa04-42b5-9f9b-13fa4c4e64d6", "content": "", "creation_timestamp": "2026-06-19T12:46:44.521518Z"}, {"uuid": "1f0602f2-f186-448f-80a3-fba8cfe6e70f", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-33106", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/c2dfbb1e-6360-42d7-bf27-27fd3b2186c5", "content": "", "creation_timestamp": "2026-06-23T14:05:49.046919Z"}, {"uuid": "c56eddc6-0d7e-470b-9314-6c6407a63f1d", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-33107", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/49b1e07b-00ad-4157-b91b-3b1a9d9fb151", "content": "", "creation_timestamp": "2026-06-23T14:05:49.110558Z"}, {"uuid": "bfd9ffa3-ae8e-464d-a8f9-65ab981fe35f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-33106", "type": "seen", "source": "Telegram/MnJTdr9_ZCTHf2da69mp4xZ4s-PZn3n-1jLuWXi3-W8oik9D", "content": "", "creation_timestamp": "2026-07-11T22:00:07.674305Z"}, {"uuid": "a00e32dc-42b2-4c26-825c-6cba58557d9c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-33106", "type": "seen", "source": "Telegram/c4Zaw0B2yPoKMr43UpuUj_ti6aOu5EUfz5Pe9kGfC5GUmDjB", "content": "", "creation_timestamp": "2026-07-11T22:00:07.519792Z"}, {"uuid": "d963c124-4436-4cc9-a0bb-d36752256c0f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-33106", "type": "seen", "source": "Telegram/gUKdnK-fRDGiDD_BE2PJYHHzL1HNh1uWWN9JbdO02pvGBsOd", "content": "", "creation_timestamp": "2026-07-11T22:00:07.835520Z"}, {"uuid": "88b63a5d-f186-4ea6-a40c-0315446d9ddc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-33106", "type": "seen", "source": "Telegram/Jvf1ESwGyenco5gPmGrugBM6tJoKNQiImvIk8QjUkpR0zLlY", "content": "", "creation_timestamp": "2026-07-11T22:00:07.790084Z"}, {"uuid": "949bfd65-9801-4caa-8767-d1406747c81c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-33106", "type": "seen", "source": "Telegram/c4Zaw0B2yPoKMr43UpuUj_ti6aOu5EUfz5Pe9kGfC5GUmDjB", "content": "", "creation_timestamp": "2026-07-12T00:00:20.272797Z"}, {"uuid": "2c5c54fc-a4aa-465f-ad44-931d9efaf8a0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-33106", "type": "seen", "source": "Telegram/MnJTdr9_ZCTHf2da69mp4xZ4s-PZn3n-1jLuWXi3-W8oik9D", "content": "", "creation_timestamp": "2026-07-12T00:00:20.365515Z"}, {"uuid": "50d1215f-cf81-4bd1-a9bb-363e7b94e807", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-33106", "type": "seen", "source": "Telegram/Jvf1ESwGyenco5gPmGrugBM6tJoKNQiImvIk8QjUkpR0zLlY", "content": "", "creation_timestamp": "2026-07-12T00:00:20.447403Z"}, {"uuid": "915fe038-9804-4a6a-af63-1dbcefc6c9fb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-33106", "type": "seen", "source": "Telegram/gUKdnK-fRDGiDD_BE2PJYHHzL1HNh1uWWN9JbdO02pvGBsOd", "content": "", "creation_timestamp": "2026-07-12T00:00:20.482811Z"}, {"uuid": "d7ce1508-d74c-48ae-beb6-e7c539119a15", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-33107", "type": "seen", "source": "https://t.me/GithubRedTeam/94780", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #Exploit #CVE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a picohaxx\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a 264312431\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 2  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-23 07:42:34\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nA kernel exploit for Pico 4 devices based on cve-2023-33107\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-23T09:00:03.463974Z"}, {"uuid": "8d469048-ff21-46e6-8141-aba0aed4c0a9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-33107", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/94780", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #Exploit #CVE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a picohaxx\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a 264312431\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 2  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-23 07:42:34\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nA kernel exploit for Pico 4 devices based on cve-2023-33107\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-24T00:00:09.517321Z"}]}