Entreprise d'experts en Sécurité Informatique : Audits et conseils en cybersécurité
Entreprise française de cybersécurité depuis 2004
☎ 03 60 47 09 81 - info@securiteinfo.com


CVE-2020-11239

Description

Use after free issue when importing a DMA buffer by using the CPU address of the buffer due to attachment is not cleaned up properly in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

POC

Reference

- https://www.qualcomm.com/company/product-security/bulletins/january-2021-bulletin

Github

- https://github.com/NetKingJ/android-security-awesome

- https://github.com/NetKingJ/awesome-android-security

- https://github.com/TinyNiko/android_bulletin_notes

- https://github.com/n0-traces/cve_monitor