Eugene Rodionov

A big honor to coauthor with @abc_sup and Gulshan the very first blog from Android Red Team on analysis and exploitation of CVE-2023-20938 in Android Binder driver at androidoffsec.withgoogle.com/posts/attackin… 🔥
The slide-deck presented at @offensive_con is available at androidoffsec.withgoogle.com/posts/attackin…

Exciting story on collaboration between Google Android Offsec and ARM product security on proactively securing Mali GPU attack surface in Android and beyond. Among proactively identified and mitigated issues is CVE-2024-0153 in GPU firmware.

Excited to share our blog post with @IvanOfFlorida on enabling Kernel Address Sanitizer (KASan) for bare-metal targets to further harden firmware in Android and beyond security.googleblog.com/2024/03/addres…

PoC/Demo source code for enabling KASan on ARM/x86/RISC-V : github.com/androidoffsec/…

Slide-deck of our talk at BH USA 2023 on attacking & securing Pixel modem are available at i.blackhat.com/BH-US-23/Prese… @jumpycastle, Xuan & Xiling

The video of our presentation with @WillDeacon at #kvmforum2022 on fuzzing Linux virtio front-end drivers with LKL to harden host-to-guest attack surface in the context of the #Android Protected KVM is available:

video: youtu.be/cJjjlSG6JEA
slides: static.sched.com/hosted_files/k…