Pierluigi Paganini
March 18, 2021
Egyptian security researcher Sayed Abdelhafiz discovered multiple vulnerabilities in the TikTok Android Application that can be chained to achieve Remote code execution.
“While testing TikTok for Android Application, I identified multiple bugs that can be chained to achieve Remote code execution that can be triaged through multiple dangerous attack vectors.” Abdelhafiz wrote.
The list of vulnerabilities discovered by the expert are:
TmaTestActivityThe researcher provided technical details for each of the above vulnerabilities and finally explained how to chain them to achieve remote code execution.
The expert created a zip file and path traversed the filename to overwrite the libjsc.so file:
/data/data/com.zhiliaoapp.musically/app_lib/df_rn_kit/df_rn_kit_a3e37c20900a22bc8836a51678e458f7/arm64-v8a/libjsc.so
Then he overwrote the native-libraries with a malicious library created to execute his code. The expert initially noticed that the code will be executed at the successive restart of the Application, so he attempted to find a way to reload the library without relaunching the application. This was possible by launching the Activity:
com.tt.miniapphost.placeholder.MiniappTabActivity0
The expert also published final PoC for the RCE and reported the issue to the TikTok Security team that quickly addressed them. Below the list of actions taken by TikTok:
If you want to receive the weekly Security Affairs Newsletter for free subscribe here.
Follow me on Twitter: @securityaffairs and Facebook
| [adrotate banner=”9″] | [adrotate banner=”12″] |
(SecurityAffairs – hacking, Microsoft Exchange)
[adrotate banner=”5″]
[adrotate banner=”13″]
