Understanding the Acropalypse Screenshot Vulnerability

aCropalypse (CVE-2023-21036) is a vulnerability found on Google Pixel phones (and Windows Snipping Tool!) that can allow a cropped and redacted screenshot to be uncropped and restored back to the original.

The Android phone used in the video is not a Google Pixel phone, so the vulnerability has been artificially re-introduced for demonstration purposes. The explanation in this video is simplified a lot, so make sure to check out the original blog post for more details and info.

Blog post: https://www.da.vidbuchanan.co.uk/blog/exploiting-acropalypse.html
Tweet: https://twitter.com/ItsSimonTime/status/1636857478263750656

0:00 - Intro
0:23 - Demo
0:57 - Explanation
2:08 - Info and credits