Seems low considering the wide impact, but maybe the only thing corporations throw big money at is remote exploits?
replyThat's a huge amount of money for a vulnerability.
replyAlso one order of magnitude less than you could get on the black market for a universal Linux LPE and two orders less if you can make it work reliably.
replyI believe you are two orders of magnitude wrong, in the upward direction, on that number (the first of them). You're talking about reliable remote numbers there, full chain, full enablement, tranched with maintenance.
replySurely working on Android adjusts the number upwards by a lot?
replydeleted
replyHow is it a wide impact?
replyIt requires being able to execute arbitrary code on the machine in userspace. If you have that, most of the time you don't even care about kernel level exploits.
It's a browser to kernel full chain exploit, from url click to root your device.
replySupposedly it can root Android.
reply