Resources
People often ask me "How did you learn how to hack?" The answer: by reading. This page is a collection of the blog posts and other articles that I have accumulated over the years of my journey. Enjoy!
Man, these people sure worked hard for this exploit! An RCE bug and a sandbox escape to get onto the Google Pixel...
There were three features being used together, that triggered an odd OOB race condition.
The sandbox escape is from a use-after-unmap? Whatever that means! Likely, a use-after-free of some kind.
Eventually, after the sandbox escape, a ROP (return oriented programming) technique is used. In the wild, creating a REAL chain of gadgets can be difficult, but is possible!