Chrome Sandbox Escape Android - Vulnerability Researcher

- Renderer-accessible Mojo interfaces, interface brokers and browser-process endpoints.

- GPU, media, network, utility, device and other services reachable from low-privilege Chrome processes.

- Android-specific Chrome integration, including platform bridges, Binder-facing components, permissions and service boundaries.

- Confused-deputy conditions, validation gaps, unsafe deserialisation, lifetime errors, races and state-machine mistakes.

- Cross-process exploitation where asynchronous IPC, handles, shared memory or capability transfer affect reliability.

- End-to-end chains with renderer and Android-kernel researchers when needed.

- Original vulnerabilities that cross a Chrome process, privilege or trust boundary on Android.

- Reliable sandbox-escape exploit components that work under production mitigations.

- Prioritised attack-surface areas that are deemed to be complex enough to contain vulnerabilities.

- Triggers, PoCs, exploitability analysis, target assumptions and complete technical handover.

- Reusable tooling for IPC discovery, Mojo message generation, tracing, instrumentation, coverage and variant analysis.

- Demonstrable delivery of Chrome/Chromium sandbox escapes, browser-process vulnerabilities or closely comparable cross-privilege exploitation.

- Deep knowledge of Chromium’s multi-process architecture, sandbox policy and renderer-to-browser trust boundaries.

- Strong practical experience with Mojo IPC, bindings, data pipes, shared memory, interface ownership and message validation.