{
  "id": 16604992,
  "title": "Shadow: Dummy folders, an obvious overflow, and a ROP chain",
  "url": "https://urgent.news/2026/10/26/shadow-dummy-folders-an-obvious-overflow-and-a-rop-chain",
  "topic": "tech",
  "section": "Tech",
  "published": "2026-10-26T13:22:23.000Z",
  "source": {
    "name": "Lobsters",
    "slug": "lobsters",
    "url": "https://chirp.tene7.com/?action=view&url=shadow-dummy-folders-an-obvious-overflow-and-a-rop-chain"
  },
  "original_language": "en",
  "account": "The article discusses a complex jailbreak technique for the Kindle e-reader device. It explains how the Media Transfer Protocol (MTP) is used to transfer files between the device and other devices, and how this protocol can be exploited to execute arbitrary code on the device. The jailbreak is named \"Shadow\" because it was in development for a long time and was eventually patched, but the author decided to release it due to its novelty and the availability of alternative jailbreak options. The article details the specific vulnerabilities in the MTP implementation that were used to execute the exploit, including a memory leak bug in the MTP library and a stack buffer overflow vulnerability. The author also describes how these vulnerabilities are chained together to create a successful exploit.",
  "summary": null,
  "key_points": [
    "Kindle device exploited using Shadow jailbreak technique",
    "MTP protocol vulnerabilities exploited for arbitrary code execution",
    "Memory leak and stack buffer overflow chained to create exploit"
  ],
  "editors_take": "Exploiting memory vulnerabilities within the Media Transfer Protocol demonstrates how standard file transfer processes can become critical entry points for executing unauthorized code on consumer e-reader hardware.",
  "illustration": null,
  "coverage": {
    "outlets": 1,
    "also_reported_by": []
  },
  "ai_generated": true,
  "disclaimer": "Summaries, key points and the editor’s take are written by software from other outlets’ reporting and may contain errors — always check the linked original."
}