Abstract

We all know that there are many Android vendors like Google, Samsung, Xiaomi, and many others. When we pick an Android device, we often look at hardware characteristics like battery life, camera, or screen size. However, internally, their underlying Androids are very different!

We passed the whole summer finding differences in Google-d and Samsung-ed Androids, including system managers, services (system AIDLs), and how they are used by the Framework and system apps. As a result, Samsung already filed over a hundred CVEs.

In this presentation, Sergey will tell about the differences between Androids of Google and Samsung and some interesting vulnerabilities Oversecured discovered.