Stagefright: Scary Code in the Heart of Android

Overview: This presentation centers around the speaker's experience researching a particularly scary area of Android, the Stagefright multimedia framework. By limiting his focus to a relatively small area of code that's critically exposed on 95% of devices, Joshua discovered a multitude of implementation issues with impacts ranging from unassisted remote code execution down to simple denial of service. Apart from a full explanation of these vulnerabilities, this presentation also discusses; techniques use

Key Topics: d for discovery, Android OS internals, and the disclosure process. Finally, proof-of-concept code will be demonstrated.