OEMpocalypse: Unprivileged Android app to root on Samsung, Xiaomi, others

A security researcher has developed a single exploitation strategy that successfully achieves root access on unprivileged Android apps across multiple major manufacturers including Samsung, Xiaomi, Oppo, OnePlus, and Realme. The method targets page Use-After-Free vulnerabilities in OEM-specific kernel drivers combined with sandbox escapes, providing reliable exploitation that works across different kernel versions and device models. The approach covers all recent Samsung flagship devices and a large share of mid-range to flagship devices from other manufacturers.