Open youyudekucaizi opened 1 year ago
My Android version is 10
This is exploit for vulnerability introduced on Android 13 so there isn't point in running this on older version
The getBinderForSetQueue()
(internal) method itself was introduced in Android 12
(but still this won't work on Android 12 because LazyValue
didn't exist there (LazyValue
isn't explicitly listed by name, it is structure of serialized data)
got it, thanks
This is exploit for vulnerability introduced on Android 13 so there isn't point in running this on older version
The
getBinderForSetQueue()
(internal) method itself was introduced in Android 12(but still this won't work on Android 12 because
LazyValue
didn't exist there (LazyValue
isn't explicitly listed by name, it is structure of serialized data)
The exploit
CVE-2022-20474 A-240138294 [2] EoP High 10, 11, 12, 12L, 13
Any chance to get it working ? Or is it used on this release
The LazyValue
was introduced in Android 13, but lets explain that version list
That row comes from security bulletin
CVE | References | Type | Severity | Updated AOSP versions |
---|---|---|---|---|
CVE-2022-20474 | A-240138294 [2] | EoP | High | 10, 11, 12, 12L, 13 |
Note that last column is called "Updated AOSP versions", not "Affected". In this case distinction matters because in references column we have two links to patches
When I pressed the start button after the app is installed, it will prompt "java.lang.NoSuchMethodException: android.media.session.ISession$Stub$Proxy.getBinderForSetQueue []" error. I found the exact code is:mGetBinderForSetQueue = mMediaSessionBinder.getClass().getMethod("getBinderForSetQueue"); I use android api 32, how to solve this problem? Also I found the MediaSession class only contains the setQueue method which will call getBinderForSetQueue method. Any advice will be greatly appreciated