Research
Android 11 PIP Vulnerability
This paper explores an Android 11 vulnerability where missing size permissions let adversaries create arbitrarily small, invisible windows.
Using this window, it is possible for an unprivileged application to maintain its foreground stage and bypass security restrictions allowing it to use critical permissions.
Key Pointers:
- What is PIP mode and understanding the vulnerability in Android 11
- Understanding the key terms used throughout this paper
- Mapping the affected and unaffected android versions
- Setting up the virtual environment and performing the exploitation
- Taking a look at some of the mitigations to this vulnerability