Amazon Fire TV Cube Rooted Using Four-Year-Old Arm Mali Vulnerability
A four-year-old Arm Mali GPU vulnerability can be used to root the third-generation Amazon Fire TV Cube, but its patch status remains unclear.
A vulnerability in Arm’s Mali GPU driver, first disclosed four years ago, has been adapted to gain root access to the third-generation Amazon Fire TV Cube, allowing users to remove Amazon’s software restrictions and install alternative operating systems, according to Cybernews research shared with Hackread.com.
The exploit uses CVE-2022-38181 (CVSS 8.8), a high-severity use-after-free vulnerability in the Arm Mali GPU kernel driver. The bug involves memory that the driver frees while it may still be in use, creating an opportunity to manipulate kernel memory and gain elevated privileges.
Security researcher Man Yue Mo reported the vulnerability to the Android security team on July 12, 2022. His original proof of concept showed how an unprivileged Android process could exploit the bug to execute code in the kernel and...
Copyright of this story solely belongs to hackread.com. To see the full text click HERE
