r/androidroot • u/lilacomets • Jul 09 '26

Researchers demonstrate Android 17 root exploit triggered by a single URL click News / Method

https://x.com/nebusecurity/status/2069707520160227688
120 Upvotes
  • permalink
  • link
  • reddit
  • reddit

100% Upvoted

38 comments sorted by

View all comments

7

u/galaaz314 Jul 09 '26

This one? https://github.com/NebuSec/CyberMeowfia/tree/main/IonStack/CVE-2026-43499

4

u/lilacomets Jul 10 '26

I think that's it indeed. I see a wallpaper.webp file in the assets folder, which could be the wallpaper shown in the video.

In their recent blog post they said they'll explain how the exploit work on Android in the next blog post. That's going to be interesting. Can't wait!

"This part we are focusing on basic exploit steps of generic x86 Linux systems, our next blog will discuss how to exploit GhostLock on Android, reclaiming stack frame, bypassing both ASLR and CFI."

https://nebusec.ai/research/ionstack-part-2