Shannon firmware is a proprietary baseband firmware developed by Samsung for its range of mobile devices. This firmware plays a critical role in managing the baseband processor, which is responsible for all communication functions between a mobile device and a cellular network.

In this article, we will look how to find the correct version of libhwui.so that is vulnerable against CVE-2020-8899. We are looking for the exact version that comes with the Samsung Note 10+ stock firmware. Once we have the libhwui.so, we will use this in the upcoming articles to build our fuzzing harness to identify the same bug.

Explore the mechanics of stack overflow vulnerabilities in our latest blog post. Learn how attackers can manipulate stack overflows to execute arbitrary code despite modern protections like DEP/NX. We delve into advanced bypass techniques such as 'return-to-function' and 'return-to-libc' attacks, providing a deep understanding of these critical security challenges.

In this article we are going to dive into Libprotobuf structure-aware fuzzing to learn how to perform fuzzing against functions that accept only complex data types likes Structures, Classes or other structured data.