As the attack surface of modern Android devices shrinks and the number of software and hardware mitigations increases, GPU drivers have emerged as a prime target for mobile device exploitation.
In this presentation, we will explain the memory management methods of the three GPUs (Adreno, Mali, and PowerVR), highlight their similarities and differences. Furthermore, we will demonstrate practical exploitation of GPU MMU vulnerabilities to achieve universal root access. Additionally, we will discuss various limitations present in the exploitation. Finally, we will present root demonstrations across multiple Android devices and discuss some effective mitigation strategies for GPU MMU vulnerabilities.
Overall, we have conducted an in-depth analysis of the MMU components of the three major GPUs in Android devices, discovered several vulnerabilities and developed the exploitation techniques.
fish is focusing on Linux and mobile security.
Ling Hanqin is focused on Android Kernel.
