https://labs.taszk.io/articles/ 2026-04-28T00:00:00+00:00 https://labs.taszk.io/blog/ 2026-04-28T00:00:00+00:00 https://labs.taszk.io/blog/post/118_tp_dos_1/ 2026-04-28T00:00:00+00:00 https://labs.taszk.io/blog/post/119_tp_dos_2/ 2026-04-28T00:00:00+00:00 https://labs.taszk.io/blog/post/125_tp_stack_bof_onvif/ 2026-04-28T00:00:00+00:00 https://labs.taszk.io/blog/post/123_tp_path_traversal/ 2026-04-28T00:00:00+00:00 https://labs.taszk.io/blog/post/115_tp_heap_bof/ 2026-04-28T00:00:00+00:00 https://labs.taszk.io/blog/post/116_tp_heap_bof_2/ 2026-04-28T00:00:00+00:00 https://labs.taszk.io/blog/post/117_tp_heap_bof_3/ 2026-04-28T00:00:00+00:00 https://labs.taszk.io/blog/post/120_tp_auth_bp/ 2026-04-28T00:00:00+00:00 https://labs.taszk.io/blog/post/124_tp_stack_bof_dos/ 2026-04-28T00:00:00+00:00 https://labs.taszk.io/articles/post/tapocalypse/ 2026-04-28T00:00:00+00:00 https://labs.taszk.io/ 2026-04-28T00:00:00+00:00 https://labs.taszk.io/blog/post/121_tp_auth_bp_2/ 2026-04-28T00:00:00+00:00 https://labs.taszk.io/blog/post/126_tp_cloud_bruteforce/ 2026-04-28T00:00:00+00:00 https://labs.taszk.io/blog/post/122_tp_stack_bof/ 2026-04-28T00:00:00+00:00 https://labs.taszk.io/articles/post/nowyouseemi/ 2026-03-16T00:00:00+00:00 https://labs.taszk.io/blog/post/112_mi_hshake_bypass/ 2026-03-16T00:00:00+00:00 https://labs.taszk.io/blog/post/113_mi_rng_predict/ 2026-03-16T00:00:00+00:00 https://labs.taszk.io/blog/post/114_mi_heap_bof/ 2026-03-16T00:00:00+00:00 https://labs.taszk.io/articles/post/eastern_promises/ 2025-10-22T00:00:00+00:00 https://labs.taszk.io/blog/post/97_mtk_sdp_extra_codec_info_sbof/ 2025-10-01T00:00:00+00:00 https://labs.taszk.io/blog/post/96_mtk_sip_multipart_heap_overflow/ 2025-10-01T00:00:00+00:00 https://labs.taszk.io/blog/post/100_mtk_sip_header_comment_recursion/ 2025-10-01T00:00:00+00:00 https://labs.taszk.io/blog/post/99_mtk_sip_asserted_identity_heap_overflow/ 2025-10-01T00:00:00+00:00 https://labs.taszk.io/blog/post/98_mtk_sdp_amr_mode_set_overflow/ 2025-10-01T00:00:00+00:00 https://labs.taszk.io/blog/post/92_unisoc_trustlet_bof/ 2025-10-01T00:00:00+00:00 https://labs.taszk.io/blog/post/111_recurse_xml/ 2025-10-01T00:00:00+00:00 https://labs.taszk.io/blog/post/101_mtk_arbitrary_heap_inet_msg_unpack_addr/ 2025-10-01T00:00:00+00:00 https://labs.taszk.io/blog/post/103_heap_inet_msg_unpack_uri_with_len/ 2025-10-01T00:00:00+00:00 https://labs.taszk.io/blog/post/104_heap_inet_param_struct_free_fn/ 2025-10-01T00:00:00+00:00 https://labs.taszk.io/blog/post/95_hw_hypervisor_bp/ 2025-10-01T00:00:00+00:00 https://labs.taszk.io/blog/post/102_dos_multipart-sms/ 2025-10-01T00:00:00+00:00 https://labs.taszk.io/blog/post/105_memleak_sdp_attribute/ 2025-10-01T00:00:00+00:00 https://labs.taszk.io/blog/post/106_null_accept/ 2025-10-01T00:00:00+00:00 https://labs.taszk.io/blog/post/107_null_inet_msg_header_unpack_fn/ 2025-10-01T00:00:00+00:00 https://labs.taszk.io/blog/post/108_null_sdp_bandwidth/ 2025-10-01T00:00:00+00:00 https://labs.taszk.io/blog/post/109_null_sdp_empty_transport/ 2025-10-01T00:00:00+00:00 https://labs.taszk.io/blog/post/110_null_sdp_msg_create_negotiation_sdp/ 2025-10-01T00:00:00+00:00 https://labs.taszk.io/articles/post/hypervisor1/ 2025-09-24T00:00:00+00:00 https://labs.taszk.io/blog/post/93_rlc_bof/ 2024-07-29T00:00:00+00:00 https://labs.taszk.io/blog/post/94_rlc_heap_bof/ 2024-07-29T00:00:00+00:00 https://labs.taszk.io/articles/post/there_will_be_bugs/ 2024-07-29T00:00:00+00:00 https://labs.taszk.io/articles/post/full_chain_bb_part1/ 2023-12-07T00:00:00+00:00 https://labs.taszk.io/articles/post/full_chain_bb_part2/ 2023-12-07T00:00:00+00:00 https://labs.taszk.io/articles/post/full_chain_bb_part3/ 2023-12-07T00:00:00+00:00 https://labs.taszk.io/blog/post/83_mtk_ccci3_bof/ 2023-11-28T00:00:00+00:00 https://labs.taszk.io/blog/post/84_mtk_pncd_bof/ 2023-11-28T00:00:00+00:00 https://labs.taszk.io/blog/post/81_mtk_ccci1_oob_write/ 2023-11-28T00:00:00+00:00 https://labs.taszk.io/blog/post/82_mtk_ccci2_oob_read/ 2023-11-28T00:00:00+00:00 https://labs.taszk.io/blog/post/85_ss_esm_bof/ 2023-11-28T00:00:00+00:00 https://labs.taszk.io/blog/post/91_ss_sipc_stack_bof_2/ 2023-11-28T00:00:00+00:00 https://labs.taszk.io/blog/post/89_ss_sipc_heap_bof_4/ 2023-11-28T00:00:00+00:00 https://labs.taszk.io/blog/post/88_ss_sipc_heap_bof_3/ 2023-11-28T00:00:00+00:00 https://labs.taszk.io/blog/post/87_ss_sipc_heap_bof_2/ 2023-11-28T00:00:00+00:00 https://labs.taszk.io/blog/post/90_ss_sipc_stack_bof_1/ 2023-11-28T00:00:00+00:00 https://labs.taszk.io/blog/post/86_ss_sipc_heap_bof_1/ 2023-11-28T00:00:00+00:00 https://labs.taszk.io/articles/post/basebanheimer_hwio/ 2023-09-28T00:00:00+00:00 https://labs.taszk.io/articles/post/reunzip/ 2023-02-16T00:00:00+00:00 https://labs.taszk.io/blog/post/80_update_toctou/ 2023-02-16T00:00:00+00:00 https://labs.taszk.io/blog/post/77_hw_hwlog_kptr_leak/ 2022-07-27T00:00:00+00:00 https://labs.taszk.io/blog/post/79_hw_hwlog_uaf/ 2022-07-24T00:00:00+00:00 https://labs.taszk.io/blog/post/78_hw_hwlog_race/ 2022-07-24T00:00:00+00:00 https://labs.taszk.io/articles/post/unziploc/ 2022-06-14T00:00:00+00:00 https://labs.taszk.io/blog/post/69_hw_peridma_tee/ 2022-05-18T00:00:00+00:00 https://labs.taszk.io/blog/post/73_hw_edma_mpu/ 2022-05-18T00:00:00+00:00 https://labs.taszk.io/blog/post/71_hw_aspdma_dmss/ 2022-05-18T00:00:00+00:00 https://labs.taszk.io/blog/post/72_hw_lpmcu_dmss/ 2022-05-18T00:00:00+00:00 https://labs.taszk.io/blog/post/70_hw_peridma_dmss/ 2022-05-18T00:00:00+00:00 https://labs.taszk.io/blog/post/74_hw_edma_modem/ 2022-05-18T00:00:00+00:00 https://labs.taszk.io/blog/post/75_hw_eocd_sig/ 2022-05-18T00:00:00+00:00 https://labs.taszk.io/blog/post/76_hw_hota_ssl/ 2022-05-18T00:00:00+00:00 https://labs.taszk.io/articles/post/mtk_baseband_csn1_exploitation/ 2022-03-10T00:00:00+00:00 https://labs.taszk.io/blog/post/65_mtk_hof_1/ 2022-03-10T00:00:00+00:00 https://labs.taszk.io/blog/post/66_mtk_hof_2/ 2022-03-10T00:00:00+00:00 https://labs.taszk.io/blog/post/67_mtk_hof_3/ 2022-03-10T00:00:00+00:00 https://labs.taszk.io/blog/post/68_mtk_hof_4/ 2022-03-10T00:00:00+00:00 https://labs.taszk.io/blog/post/64_ss_dsp_perma_dos/ 2021-12-14T00:00:00+00:00 https://labs.taszk.io/blog/post/58_ss_dsp_leak/ 2021-12-14T00:00:00+00:00 https://labs.taszk.io/blog/post/62_ss_dsp_oob_write/ 2021-12-14T00:00:00+00:00 https://labs.taszk.io/blog/post/63_ss_dsp_oob_write_linker/ 2021-12-14T00:00:00+00:00 https://labs.taszk.io/blog/post/60_ss_ion_null_deref/ 2021-12-13T00:00:00+00:00 https://labs.taszk.io/blog/post/59_ss_dma_buf_error_check/ 2021-12-13T00:00:00+00:00 https://labs.taszk.io/articles/post/ouchscreen/ 2021-12-03T00:00:00+00:00 https://labs.taszk.io/blog/post/61_android_ion_uaf/ 2021-09-22T00:00:00+00:00 https://labs.taszk.io/blog/post/bootrom_head_resend/ 2021-08-19T00:00:00+00:00 https://labs.taszk.io/articles/post/huawei_kirin990_bootrom_patch/ 2021-08-19T00:00:00+00:00 https://labs.taszk.io/blog/post/54_hw_npu_any_call/ 2021-08-02T00:00:00+00:00 https://labs.taszk.io/blog/post/53_hw_npu_nmap/ 2021-08-02T00:00:00+00:00 https://labs.taszk.io/blog/post/56_hw_npu_uaf/ 2021-08-02T00:00:00+00:00 https://labs.taszk.io/blog/post/55_hw_npu_oob_write/ 2021-08-02T00:00:00+00:00 https://labs.taszk.io/blog/post/57_hw_npu_mmap_dos/ 2021-08-02T00:00:00+00:00 https://labs.taszk.io/articles/post/exploiting_huaweis_npu_driver/ 2021-07-30T00:00:00+00:00 https://labs.taszk.io/blog/post/bootrom_usb/ 2021-07-30T00:00:00+00:00 https://labs.taszk.io/articles/post/bug_collision_in_samsungs_npu_driver/ 2021-06-08T00:00:00+00:00 https://labs.taszk.io/about/ 2020-04-11T19:15:32+08:00 https://labs.taszk.io/blog/post/scrypto_toctou2/ 2018-03-03T00:00:00+00:00 https://labs.taszk.io/blog/post/scrypto_toctou/ 2018-03-02T00:00:00+00:00 https://labs.taszk.io/blog/post/scrypto_bof/ 2018-03-01T00:00:00+00:00 https://labs.taszk.io/articles/post/unbox_your_phone_3/ 2018-01-30T00:00:00+00:00 https://labs.taszk.io/articles/post/unbox_your_phone_2/ 2018-01-29T00:00:00+00:00 https://labs.taszk.io/articles/post/unbox_your_phone_1/ 2018-01-28T00:00:00+00:00 https://labs.taszk.io/blog/archives/2018/ https://labs.taszk.io/articles/archives/2018/ https://labs.taszk.io/blog/archives/2021/ https://labs.taszk.io/articles/archives/2021/ https://labs.taszk.io/blog/archives/2022/ https://labs.taszk.io/articles/archives/2022/ https://labs.taszk.io/blog/archives/2023/ https://labs.taszk.io/articles/archives/2023/ https://labs.taszk.io/blog/archives/2024/ https://labs.taszk.io/articles/archives/2024/ https://labs.taszk.io/blog/archives/2025/ https://labs.taszk.io/articles/archives/2025/ https://labs.taszk.io/blog/archives/2026/ https://labs.taszk.io/articles/archives/2026/ https://labs.taszk.io/blog/tags/android/ https://labs.taszk.io/articles/tags/android/ https://labs.taszk.io/articles/__archives/ https://labs.taszk.io/blog/__archives/ https://labs.taszk.io/blog/tags/baseband/ https://labs.taszk.io/articles/tags/baseband/ https://labs.taszk.io/blog/tags/bootloader/ https://labs.taszk.io/articles/tags/bootloader/ https://labs.taszk.io/blog/tags/bootrom/ https://labs.taszk.io/blog/author/botond-hartmann/ https://labs.taszk.io/articles/author/botond-hartmann/ https://labs.taszk.io/blog/tags/camera/ https://labs.taszk.io/articles/tags/camera/ https://labs.taszk.io/blog/author/daniel-komaromy/ https://labs.taszk.io/articles/author/daniel-komaromy/ https://labs.taszk.io/articles/author/daniel-komaromy-laszlo-szapula-laszlo-radnai/ https://labs.taszk.io/articles/author/daniel-komaromy-lorant-szabo-laszlo-szapula/ https://labs.taszk.io/blog/tags/dma/ https://labs.taszk.io/articles/tags/dma/ https://labs.taszk.io/blog/tags/http/ https://labs.taszk.io/blog/tags/huawei/ https://labs.taszk.io/articles/tags/huawei/ https://labs.taszk.io/blog/tags/hypervisor/ https://labs.taszk.io/articles/tags/hypervisor/ https://labs.taszk.io/blog/tags/ims/ https://labs.taszk.io/articles/tags/ims/ https://labs.taszk.io/blog/tags/kernel/ https://labs.taszk.io/articles/tags/kernel/ https://labs.taszk.io/blog/author/kutyacica/ https://labs.taszk.io/articles/author/kutyacica/ https://labs.taszk.io/blog/author/laszlo-radnai/ https://labs.taszk.io/articles/author/laszlo-radnai-botond-hartmann/ https://labs.taszk.io/blog/author/laszlo-szapula/ https://labs.taszk.io/articles/author/laszlo-szapula/ https://labs.taszk.io/blog/author/lorant-szabo/ https://labs.taszk.io/articles/author/lorant-szabo/ https://labs.taszk.io/blog/author/lorant-szabo-daniel-komaromy/ https://labs.taszk.io/blog/tags/lte/ https://labs.taszk.io/blog/tags/mediatek/ https://labs.taszk.io/articles/tags/mediatek/ https://labs.taszk.io/blog/tags/ota/ https://labs.taszk.io/articles/tags/ota/ https://labs.taszk.io/blog/tags/recovery/ https://labs.taszk.io/articles/tags/recovery/ https://labs.taszk.io/blog/tags/ril/ https://labs.taszk.io/blog/tags/samsung/ https://labs.taszk.io/articles/tags/samsung/ https://labs.taszk.io/articles/search/ https://labs.taszk.io/blog/search/ https://labs.taszk.io/blog/tags/smart/ https://labs.taszk.io/articles/tags/smart/ https://labs.taszk.io/blog/tags/soc/ https://labs.taszk.io/blog/tags/ssl/ https://labs.taszk.io/blog/author/taszk-security-labs/ https://labs.taszk.io/articles/author/taszk-security-labs/ https://labs.taszk.io/blog/tags/toctou/ https://labs.taszk.io/articles/tags/toctou/ https://labs.taszk.io/blog/tags/tp-link/ https://labs.taszk.io/articles/tags/tp-link/ https://labs.taszk.io/blog/tags/trustzone/ https://labs.taszk.io/articles/tags/trustzone/ https://labs.taszk.io/blog/tags/unisoc/ https://labs.taszk.io/articles/tags/unisoc/ https://labs.taszk.io/blog/tags/wifi/ https://labs.taszk.io/articles/tags/wifi/ https://labs.taszk.io/blog/tags/xiaomi/ https://labs.taszk.io/articles/tags/xiaomi/