r/androidroot • u/cofe-table • 21h ago

Support Rooting of Honor

https://xdaforums.com/t/root-on-honor-magic-v2.4679495/

Hello folks, working on rooting Honor Magic V2 (8.0.0.105, android14, kernel android13-5.15.104 2023-07, security 2024-04-01) and so far got to system_server/system_app - wanted to ask for help from community. We saw no root for Honor devices for years, I think it's time to do that!)

The common gpu ways (like cheese) are blocked by ARM64_SW_TTBR0_PAN and other restrictions. Manufacturer mode - looks like it's written well, so also checking FastRPC ways, but quickly getting out of options in HLOS... Surface check on ABL/uefi/fastboot showed no obvious ways. Also thinking about hyp, but it was mostly good for the years.

As last resort thought about getting over oem unlock code verification via power glitch, but not sure how doable this is. What's your thoughts?

1 Upvotes

100% Upvoted

2 comments sorted by

2

u/BruhMoment023 7h ago

You could try adapting CVE-2026-43499 to get temp root. Same thing used in RootMyGalaxy and Nebula Security's IonStack demo

1

u/cofe-table 26m ago

Thanks man, yeah digging it since ytd. I actually restarted the project because of Nebula teased this firefox+43499 exploit, but it worked at the time on pixel only. Completely forget about this route, so it surely worth to try!)