Comment

Comment by DannyBee

Yes - you can't run untrusted native code in the first place outside of the emulator ;)

That's why the bug says: "The overall impact of this bug is pretty minimal in our current set of supported products, since none support running untrusted native code, and if you can run your own code on the system, then (at present) you can also use other existing supported workflows to obtain kernel logs, but it does seem to be a useful stepping stone towards privilege escalation if you have already obtained code-exec in some process through another exploit."

So while not awesome, also not possible on a real device right now without a code-exec exploit.

parent DannyBee 4 years ago

Discussion

Live from the official Hacker News API

A modern reader for Hacker News · SvelteKit + Skeleton