Fuzzing Android (Finding Vulnerabilities in Userspace and the Kernel)
List Price:
$69.99
| Expected release date is Nov 10th 2026 |
- Availability: Confirm prior to ordering
- Branding: minimum 50 pieces (add’l costs below)
- Check Freight Rates (branded products only)
Branding Options (v), Availability & Lead Times
- 1-Color Imprint: $2.00 ea.
- Promo-Page Insert: $2.50 ea. (full-color printed, single-sided page)
- Belly-Band Wrap: $2.50 ea. (full-color printed)
- Set-Up Charge: $45 per decoration
- Availability: Product availability changes daily, so please confirm your quantity is available prior to placing an order.
- Branded Products: allow 10 business days from proof approval for production. Branding options may be limited or unavailable based on product design or cover artwork.
- Unbranded Products: allow 3-5 business days for shipping. All Unbranded items receive FREE ground shipping in the US. Inquire for international shipping.
- RETURNS/CANCELLATIONS: All orders, branded or unbranded, are NON-CANCELLABLE and NON-RETURNABLE once a purchase order has been received.
Product Details
Author:
Hamzeh Zawawy, Eugene Rodionov, Xuan Xing, Kris Alder, Cory Barker, Steven Moreland
Format:
Paperback
Pages:
216
Publisher:
No Starch Press (November 10, 2026)
Imprint:
No Starch Press
Release Date:
November 10, 2026
Language:
English
Audience:
General/trade
ISBN-13:
9781718505292
ISBN-10:
1718505299
Weight:
13oz
Dimensions:
7" x 9.25"
File:
RandomHouse-PRH_Book_Company_PRH_PRT_Onix_delta_active_D20260923T234612_157936828-20260923.xml
Folder:
RandomHouse
List Price:
$69.99
Country of Origin:
United States
Pub Discount:
65
Case Pack:
24
As low as:
$53.89
Publisher Identifier:
P-RH
Discount Code:
A
QuickShip:
Yes
Overview
The operational playbook for fuzzing Android, from Binder services to the Linux kernel, by Google's Android Security Team.
Android is three billion devices of hardened, audited, relentlessly defended code, and fuzzing brings it down anyway. The method is brutally simple: Bury the system in malformed input, and wait for the rare case that cracks something open. Every crash is a lead, and behind it is usually a way in.
The Google engineers who authored this book do that for a living. They’ve fuzzed Android’s Binder IPC, the Pixel modem, the GPU drivers, and the kernel, uncovering root-level vulnerabilities the architecture was supposed to keep out of reach, and now they show you how they work.
Most fuzzing books stop at the concept; this one runs the campaign. You’ll learn how to:
Whether you’re a security researcher, an OEM security engineer, or a bug bounty hunter, Fuzzing Android is your operational playbook for finding vulnerabilities in the world’s largest mobile platform.
Covers: Android 17+ and is backward compatible with earlier AOSP releases.
Requires: A physical Android device or emulator (Cuttlefish); all required tools are open source.
Android is three billion devices of hardened, audited, relentlessly defended code, and fuzzing brings it down anyway. The method is brutally simple: Bury the system in malformed input, and wait for the rare case that cracks something open. Every crash is a lead, and behind it is usually a way in.
The Google engineers who authored this book do that for a living. They’ve fuzzed Android’s Binder IPC, the Pixel modem, the GPU drivers, and the kernel, uncovering root-level vulnerabilities the architecture was supposed to keep out of reach, and now they show you how they work.
Most fuzzing books stop at the concept; this one runs the campaign. You’ll learn how to:
- Build reproducible fuzzing environments across emulators and physical devices
- Target Android’s Binder IPC, native system services, GPU drivers, and kernel interfaces
- Instrument code for coverage using AFL++ or libFuzzer and extend Syzkaller to reach new kernel drivers
- Triage, reproduce, and investigate crashes to uncover real vulnerabilities
- Develop the judgment to choose high- value targets and bypass runtime checks when appropriate.
Whether you’re a security researcher, an OEM security engineer, or a bug bounty hunter, Fuzzing Android is your operational playbook for finding vulnerabilities in the world’s largest mobile platform.
Covers: Android 17+ and is backward compatible with earlier AOSP releases.
Requires: A physical Android device or emulator (Cuttlefish); all required tools are open source.
