A Universal Way to Exploit Android PendingIntents in High-profile and System Apps

A Universal Way to Exploit Android PendingIntents in High-profile and System Apps

Explore a comprehensive analysis of Android PendingIntents vulnerabilities in high-profile and system apps during this Black Hat conference talk. Delve into the intricacies of PendingIntent exploitation, covering topics such as retrieving and hijacking insecure PendingIntents, case studies of CVEs, and automated hunting techniques. Learn about security changes in Android 12 and receive essential guidelines for securing PendingIntents in app development. Gain valuable insights from experts Wenbo Chen, En He, and Daoyuan Wu as they uncover potential privilege escalation risks and provide practical advice for mitigating these vulnerabilities in Android applications.