OATmeal on the Universal Cereal Bus: Exploiting Android phones over USB
Project Zero's Jann Horn described a chain that let a malicious USB device take over a locked Android phone, tested on a Pixel 2, by exploiting two bugs fixed as CVE-2018-9445 (patch level 2018-08-01) and CVE-2018-9488 (patch level 2018-09-01). The first...