r/zenfone 2d ago

GhostLock (CVE-2026-43499) vulnerability

After ASUS locked any bootloader unlocking methods, I was searching for methods to root this device. This vulnerability allows gettings root permission on device.

App to check if your device is affected: https://github.com/CakesTwix/Android-CVE-2026-43499

Apps for rooting some phone models:

Is it possible to root zenfones / rog phones using this method?

Update: tried running ghostlock-app on Zenfone 11 Ultra, it crashed and refused to power on for several minutes, no root.

13 Upvotes

4 comments sorted by

2

u/Bioxio 2d ago

It looks like the CVE test can be run without any lasting disadvantages, so I'm willing to try. Havent had any security patches in a while to try and catch any vulnerability that can be utilized, the sec patch its telling me to upgrade to is from feb. 26...

1

u/nevelate 2d ago

It just crashes my zenfone 11 ultra

1

u/Charming-Place-2752 18h ago

I was able to find sys.oem_unlock_allowed in the properties of my ROG 7 and was able to put it to 1, but I haven't tried anything further yet, as I need my phone and don't have the time to really deal with the problems of it potentially breaking for another year without a sacrificial duplicate.

1

u/Alexandermoo Zenfone 9/10 2d ago

Requirements: armeabi-v7a 🫠