What is cve-2026-43499-poc-analysis?

This project is a security research writeup and proof of concept for a specific vulnerability, tracked as CVE-2026-43499, that affects some Xiaomi Android devices. The repository states plainly that it is for educational and research purposes only, and its Chinese-language instructions add that it should only be used on devices you are authorized to test. The project builds a small compiled module, called preload.so, that is tailored to a specific phone's firmware. To do this, it reads the phone's boot image file and a profile file containing two memory addresses specific to that device's kernel, then generates a header file describing those details, and compiles the module against them using the Android NDK toolchain. The README describes this as a general adaptation framework rather than a fix aimed at one single phone model, meaning it needs to be regenerated for each different device or firmware version. Once built, the compiled file is pushed onto the target device with adb, the Android command line debugging tool, and run there. The README documents this process alongside troubleshooting notes for common build problems, like a missing llvm-objdump tool or an unconfigured NDK path, and it warns that the process must be repeated whenever the device, operating system, or kernel changes, since the generated header file is specific to one exact firmware build. The project is written in C, requires Python 3, an Android NDK, LLVM tools, and adb to build and use, and provides both English and Chinese documentation. The README also lists a Windows setup path using MSYS2, so the toolchain is not limited to Linux or macOS machines, and it recommends specific NDK and LLVM versions to reduce build failures caused by mismatched tool versions.