# Supersonic/TLPE

> PoC and writeup for CVE-2026-49881, a logic flaw in Android 17's Telecom InCallController that lets an unprivileged app execute code as UID 1000 system_server with no user interaction.

- Magnitude: 0.0 out of 10 — Quiet
- Stars: 94 total · +0 stars on 2026-09-25 (UTC)
- Star trust: star growth looks organic
- Category: Security · Language: Kotlin · Created: 2026-09-09 · Last push: 2026-09-09
- GitHub: https://github.com/Supersonic/TLPE · Page: https://gitnova.dev/en/r/Supersonic/TLPE

## Useful for

- Reproduce the vulnerability on a test device and check logcat output
- Study the InCallController call chain to audit Android Telecom
- Verify whether the flaw is fixed after installing the security patch

## Why it’s here

- The repository is 16 days old and already has 94 stars.

## Star trust

Star growth looks organic.

Star-trust labels are heuristics based on the repository’s behavior, not a check of every stargazer.

## Numbers

- Forks: 11
- Issues and pull requests: 0
- Watchers: 0
- Average over the last week: 0 per day
- Usual pace: 4 per day
- Latest release: v0 (2026-09-09)

## Stars per day, last 30 days (oldest → newest, today is partial)

2026-09-30 … 2026-10-29: None, None, None, None, None, None, None, None, None, None, None, None, None, None, None, None, None, None, None, None, None, None, None, None, None, None, None, None, None, None

## Magnitude by day, last 13 days

09-13 0.8, 09-14 0.9, 09-15 0.6, 09-16 1.0, 09-17 0.3, 09-18 0.6, 09-19 0.3, 09-20 0.6, 09-21 0.8, 09-22 0.3, 09-23 0.3, 09-24 0.0, 09-25 0.0

---

Magnitude (0–10) measures how fast and how unusually interest in a repository is growing right now. It is not a quality score.
Days are UTC. “So far today” is a fact; “expected by the end of the day” is a forecast.
Summaries and use cases are written by an LLM (DeepSeek V4.1 Flash) from the README and may be inaccurate: verify specific claims (benchmarks, speed, hardware) in the repository itself.
Data as of 2026-09-25 23:47 UTC, updated every 30 minutes.