What do you think?
Rate this book
Fuzzing Android: Finding Vulnerabilities in Userspace and the Kernel
Not yet published
Expected 10 Nov 26The operational playbook for fuzzing Android, from Binder services to the Linux kernel, by Google's Android Security Team.
Android is three billion devices of hardened, audited, relentlessly defended code, and fuzzing brings it down anyway. The method is brutally Bury the system in malformed input, and wait for the rare case that cracks something open. Every crash is a lead, and behind it is usually a way in.
The Google engineers who authored this book do that for a living. They’ve fuzzed Android’s Binder IPC, the Pixel modem, the GPU drivers, and the kernel, uncovering root-level vulnerabilities the architecture was supposed to keep out of reach, and now they show you how they work.
Most fuzzing books stop at the concept; this one runs the campaign. You’ll learn how
Build reproducible fuzzing environments across emulators and physical devicesTarget Android’s Binder IPC, native system services, GPU drivers, and kernel interfacesInstrument code for coverage using AFL++ or libFuzzer and extend Syzkaller to reach new kernel driversTriage, reproduce, and investigate crashes to uncover real vulnerabilitiesDevelop the judgment to choose high- value targets and bypass runtime checks when appropriate.
Whether you’re a security researcher, an OEM security engineer, or a bug bounty hunter, Fuzzing Android is your operational playbook for finding vulnerabilities in the world’s largest mobile platform.
Android 17+ and is backward compatible with earlier AOSP releases.
A physical Android device or emulator (Cuttlefish); all required tools are open source.
Android is three billion devices of hardened, audited, relentlessly defended code, and fuzzing brings it down anyway. The method is brutally Bury the system in malformed input, and wait for the rare case that cracks something open. Every crash is a lead, and behind it is usually a way in.
The Google engineers who authored this book do that for a living. They’ve fuzzed Android’s Binder IPC, the Pixel modem, the GPU drivers, and the kernel, uncovering root-level vulnerabilities the architecture was supposed to keep out of reach, and now they show you how they work.
Most fuzzing books stop at the concept; this one runs the campaign. You’ll learn how
Build reproducible fuzzing environments across emulators and physical devicesTarget Android’s Binder IPC, native system services, GPU drivers, and kernel interfacesInstrument code for coverage using AFL++ or libFuzzer and extend Syzkaller to reach new kernel driversTriage, reproduce, and investigate crashes to uncover real vulnerabilitiesDevelop the judgment to choose high- value targets and bypass runtime checks when appropriate.
Whether you’re a security researcher, an OEM security engineer, or a bug bounty hunter, Fuzzing Android is your operational playbook for finding vulnerabilities in the world’s largest mobile platform.
Android 17+ and is backward compatible with earlier AOSP releases.
A physical Android device or emulator (Cuttlefish); all required tools are open source.
216 pages, Paperback
Expected publication November 10, 2026
Ratings & Reviews
Friends & Following
Create a free account to discover what your friends think of this book!
Community Reviews
No one has reviewed this book yet.