230 - Samsung Baseband and GPU Vulns [Binary Exploitation Podcast]

A Samsung special this week, starting off with two Samsung specific vulnerabilities, one in the baseband chip for code execution. And a stack based overflow in the RILD service handler parsing IPC calls from the baseband chip for a denial of service. Lastly a Mali GPU driver use-after-free.

Links and vulnerability summaries for this episode are available at: https://dayzerosec.com/podcast/230.html

[00:00:00] Introduction
[00:00:27] Humble Tech Book Bundle: Hacking 2023 by No Starch
[00:08:15] CVE-2023-21517: Samsung Baseband LTE ESM TFT Heap Buffer …

baseband binary binary exploitation chip code code execution denial of service driver exploitation free gpu introduction ipc mali overflow parsing podcast samsung service special stack use-after-free vulnerabilities vulns week