JNI Global References Are Still Vulnerable: Attacks and Defenses

arXiv:2405.00526v1 Announce Type: new
Abstract: System services and resources in Android are accessed through IPC based mechanisms. Previous research has demonstrated that they are vulnerable to the denial-of-service attack (DoS attack). For instance, the JNI global reference (JGR), which is widely used by system services, can be exhausted to cause the system reboot (hence the name JGRE attack). Even though the Android team tries to fix the problem by enforcing security checks, we find that it is still possible to …

android arxiv attack attacks can cs.cr defenses dos dos attack global instance ipc reference research resources service services system vulnerable