Fuzzing Android: Finding Vulnerabilities in Userspace and the Kernel

Android is three billion devices of hardened, audited, relentlessly defended code, and fuzzing brings it down anyway. The method is brutally simple: Bury the system in malformed input, and wait for the rare case that cracks something open. Every crash is a lead, and behind it is usually a way in. The Google engineers who authored this book do that for a living. They've fuzzed Android's Binder IPC, the Pixel modem, the GPU drivers, and the kernel, uncovering root-level vulnerabilities the architecture was supposed to keep out of reach, and now they show you how they work. Most fuzzing books stop at the concept; this one runs the campaign. You'll learn how to: Build reproducible fuzzing environments across emulators and physical devices; Target Android's Binder IPC, native system services, GPU drivers, and kernel interfaces; Instrument code for coverage using AFL++ or libFuzzer and extend Syzkaller to reach new kernel drivers; Triage, reproduce, and investigate crashes to uncover real vulnerabilities; Develop the judgment to choose high-value targets and bypass runtime checks when appropriate. Whether you're a security researcher, an OEM security engineer, or a bug bounty hunter, Fuzzing Android is your operational playbook for finding vulnerabilities in the world's largest mobile platform.