Research shows a path from unprivileged Android apps to root on major OEM devices

AI summary

A security researcher describes a generic exploitation strategy that starts from an untrusted Android app and ends with root on Samsung, Xiaomi, and Oppo/OnePlus/Realme devices. The approach relies on OEM-specific kernel driver page use-after-free bugs and, where needed, OEM-specific sandbox escapes, with claims of broad coverage across recent flagship and mid-range models.