AI Accelerated Exploiting: Compromising MTE Enabled Pixel from DSP Coprocessor
summary
A bug in the GXP driver lets the caller supply a DMA direction that mismatches get_user_pages flags so the co‑processor MMU maps CPU read‑only pages as writable; this yields a readonly→GPU‑marked‑writable primitive. Firmware emulation via IDA and a cumu emulator fails, so researchers dump firmware with BPF then switch to a replay approach, using Frida + libgxp.so hooks to trigger the vulnerable copy path and demonstrate the co‑processor writing "aaa" into a CPU read‑only buffer. Reported Sep 2, 2024; patched and rewarded (initial $250, later $32K); CVE‑2025‑36905 assigned.
AI-written summary · about
chapters (12)
- 0:00Introduction
- 1:07Android kernel mitigations
- 3:19Pis JSP driver choice
- 9:16GXP driver vulnerability
- 13:54Read-only write primitive
- 16:27Firmware emulation to replay
- 18:36Proof-of-concept exploit
- 20:23Local privilege escalation
- 24:46SE policy bypass
- 25:49Untrusted app exploit
- 27:37Android MTE overview
- 30:28Conclusion
related talks
47mHow to Hack a Turned-Off Computer, or Running Unsigned Code in Intel Management Engine
40mEvils in the Sparse Texture Memory: Exploit Kernel Based on Undefined Behaviors of Graphic APIs
22mHunting and Exploiting Recursive MMIO Flaws in QEMU KVM
33mExploring a New Class of Kernel Exploit Primitive
41mIs Your Memory Protected? Uncovering Vul In Automotive MPU 
52mSecuring The Unseen: Vulnerability Research In Confidential Computing
51mExploiting Hardware Glitches And Side Channels In Perfect Software
36mLost Control-Breaking Hardware-Assisted Kernel Control-Flow Integrity with Page-Oriented Programming