README.md

VirtualPatch: Fixing Android Security Vulnerabilities through Application-Level Virtualization

This repo contains the code of the exploits and the security patches we developed for the CVEs used in the paper "VirtualPatch: Fixing Android Security Vulnerabilities through Application-Level Virtualization"

CVE-2019-9376

• CVE entry: CVE-2019-9376
• Patch: accountpatch
• Exploit: shiva

CVE-2021-0313

• CVE entry: CVE-2021-0313
• Patch: MinikinPatch
• Exploit: nobreak

CVE-2021-0604

• CVE entry: CVE-2021-0604
• Patch: BtMMSPatch
• Exploit: btmms

CVE-2021-0444

• CVE entry: CVE-2021-0444
• Patch: LeakContactPatch
• Exploit: LeakContact

CVE-2021-0341

• CVE entry: CVE-2021-0341
• Patch: okhttppatch
• Exploit: -

CVE-2021-0521

• CVE entry: CVE-2021-0521
• Patch: PackagesPatch
• Exploit: AllApplications

CVE-2021-0591

• CVE entry: CVE-2021-0591
• Patch: BroadcastHijackPatch
• Exploit: BroadcastHijack

CVE-2018-9493

• CVE entry: CVE-2018-9493
• Patch: DownloadManagerSQLiPatch
• Exploit: DownloadManagerSQLi

CVE-2018-9452

• CVE entry: CVE-2018-9452
• Patch: DoSWidthCalculationPatch
• Exploit: DoSWidthCalculation

CVE-2018-9525

• CVE entry: CVE-2018-9525
• Patch: not needed
• Exploit: ChangeDeviceSettings

CVE-2018-9548

• CVE entry: CVE-2018-9548
• Patch: ContentProviderUriValidationPatch
• Exploit: ContentProviderUriValidation

CVE-2021-0931

• CVE entry: CVE-2021-0931
• Patch: BluetoothAliasPatch
• Exploit: BluetoothAlias

CVE-2018-9582

• CVE entry: CVE-2018-9582
• Patch: not needed
• Exploit: PackageInstallerSpoofing

CVE-2019-2003

• CVE entry: CVE-2019-2003
• Patch: LinkPhishingPatch
• Exploit: LinkPhishing

CVE-2019-2232

• CVE entry: CVE-2019-2232
• Patch: TextLineDoSPatch
• Exploit: TextLineDoS

CVE-2018-9467

• CVE entry: CVE-2018-9467
• Patch: HostnameParsingPatch
• Exploit: HostnameParsing

CVE-2020-0239

• CVE entry: CVE-2020-0239
• Patch: DocumentMetadataPatch
• Exploit: DocumentMetadataLeak

CVE-2020-0441

• CVE entry: CVE-2020-0441
• Patch: NotificationDOSPatch
• Exploit: LongNotificationDOS

CVE-2020-0459

• CVE entry: CVE-2020-0459
• Patch: not needed
• Exploit: NetworkInfoLeaker

CVE-2020-0391

• CVE entry: CVE-2020-0391
• Patch: not needed
• Exploit: UnprotectedBroadcastPixel

CVE-2021-1929

• CVE entry: CVE-2021-1929
• Patch: not needed
• Exploit: QualcomQmmiLeaker

CVE-2020-0014

• CVE entry: CVE-2020-0014
• Patch: ClickableToastPatch
• Exploit: MaliciousToast

CVE-2019-2137

• CVE entry: CVE-2019-2137
• Patch: EndCallPatch
• Exploit: EndCallAttack

CVE-2020-0443

• CVE entry: CVE-2020-0443
• Patch: SettingsProviderPatch
• Exploit: LocaleBootloop

CVE-2021-0597

• CVE entry: CVE-2021-0597
• Patch: not needed
• Exploit: SIPLeaker

Notes

Some CVEs do not require a patch because VirtualApp implementation of app-level virtualization prevents the exploits by design. For instance, only certain Broadcasts are delivered to or forwarded from apps running inside the virtual environment, so exploits that use other Broadcast messages are blocked by default.