Privilege Escalation via IMemory Heap Size Miscalculation in Android

This repository contains a proof-of-concept (PoC) exploit for CVE-2016-0846, a vulnerability in the Android media framework. The main file, 'mypoc.cpp', is a C++ program that creates a fake memory object and interacts with the Android media crypto subsystem via Binder IPC. It attempts to trigger the vulnerability by passing crafted memory objects to the 'decrypt' function of the media crypto interface. The exploit is local and requires execution on a device with the appropriate Android libraries. The repository structure is simple, consisting of a README and the PoC source code. No network endpoints are present; the only fingerprintable endpoint is the file name used for the memory heap. The exploit demonstrates the vulnerability but does not provide a weaponized or fully automated attack.