CVE-2021-25461

CVE-2021-25461 This is a repo with the Proof of Concept for the CVE discovered for the SAUSAGE (Security Analysis of Unix domain Socket usAGE in Android) paper that was accepted to EuroS&P 2022 I worked on this paper with Mounir Elgharabawy, the one who discovered the vuln and wrote the Proof of Concept His repo on the CVE can be seen here All details can be seen in

SAUSAGE SAUSAGE is a static analysis tool that identifies accessible Unix domain sockets given an Android firmware image SAUSAGE relies on a fork of BigMAC to process Android security policies from Android firmware It queries BigMAC for the system services that an untrusted app can communicate with using Unix domain sockets according to the firmware's SELinux policy For