Driving forward in Android drivers (Project Zero)

ThisProject Zero article looks at the exploitation of a few Android driverbugs in great detail.

As it becomes more difficult to find 0-days in core Android,third-party Linux kernel drivers continue to become a more and moreattractive target for attackers. While the bulk of present-daydetected ITW [in-the-wild] Android exploitation targets GPUdrivers, it's equally important that other third-party drivers areencouraged towards the same security standards.