CVE-2022-22063

CVE-2022-22063 CVE-2022-22063 es un problema de seguridad en el firmware del hipervisor de algunos conjuntos de chips antiguos de Qualcomm. Un componente de hardware desprotegido el "boot remapper" puede ser abusado para obtener acceso completo de lectura/escritura al hipervisor desde un sistema...

CVE-2014-4322

El código PoC funciona en Nexus 5 con Android 4.4.4 Escalada de privilegios: system-root, como parte de https://github.com/koozxcv/CVE-2014-7911-CVE-2014-4322getrootprivilege autor: andy sitio web: https://blog.csdn.net/koozxcv El exploit debe ejecutarse con privilegios de sistema y varios...

katana

Katana A BootROM exploit for Qualcomm devices released within 2016 til 2019. Brief Explanation of the Exploit With the MSM8998 Nazgul SoC, the command 0x13 SAHARARESETSTATEMACHINEID was added. The command called into bootsaharaentry, which is supposed to reinitialize Sahara. The flaw is that each...

QCSuper

QCSuper QCSuper is a tool communicating with Qualcomm-based phones and modems, allowing to capture raw 2G/3G/4G and for certain models 5G radio frames, among other things. It will allow you to generate PCAP captures of it using either a rooted Android phone, an USB dongle or an existing capture i...

libmsm_acdb_exploit

El código original está escrito por @gorohkun https://www.codeaurora.org/projects/security-advisories/stack-based-buffer-overflow-acdb-audio-driver-cve-2013-2597...

ExtractKeyMaster

ExtractKeyMaster Exploit that extracts Qualcomm's KeyMaster keys using CVE-2015-6639 and CVE-2016-2431...

qualcomm_baseband_scripts

qualcommbasebandscripts Collection of scripts for reversing Qualcomm baseband / modem firmware All offsets/addresses in the scripts have been updated to the Pixel 5 March firmware and need to be changed if using a different version. Merging mergemodemfirmware.py Merges all of the modem.b modem.b0...

Poc

exploit para baseband qualcomm...

CVE-2024-53027-WIP

CVE-2024-53027-WIP Work in Progress for POC CVE-2024-53027: Qualcomm Bluetooth/Wi-Fi Vulnerability 📄 Overview CVE-2024-53027 is a medium-severity vulnerability CVSS unrated affecting Qualcomm’s WLAN and Bluetooth chipsets in Android devices. It can cause transient denial-of-service DoS when...

CVE-2021-1965

CVE-2021-1965 CVE-2021-1965 WiFi Zero Click RCE Trigger PoC This is a quick&dirty Proof-of-Concept code to verify if your phone is vulnerable. After running the poc code, your phone is supposed to crash&reboot within seconds. In case you need more info about the bug & vulnerable code, here you ar...

qualcomm-vulnerability-scanner

Qualcomm Vulnerability Scanner The Qualcomm Vulnerability Scanner is a tool designed to scan Android devices for the recently exploited Qualcomm flaw CVE-2026-21385. This tool provides a simple and efficient way to identify vulnerable devices and apply necessary patches. Features Scan Android...

CVE-2021-1961

Código de explotación para CVE-2021-1961. El análisis completo está disponible en mi blog. Para compilar el exploit, ejecuta ndk-build del Android NDK. Para ejecutar el exploit, necesitas tener acceso a /dev/qseecom, lo que implica tener el usuario/grupo correcto y el contexto SELinux adecuado...

ghostlock-cve-2026-43499-4.19-k40

GhostLock — CVE-2026-43499 PoC Qualcomm 4.19 kernel Local privilege escalation exploiting CVE-2026-43499 — an rtmutex removewaiter bug that leaves a struct rtmutexwaiter dangling on the waiter's kernel stack kernel/locking/rtmutex.c, CWE-416 use-after-free. Adapted from NebuSec/CyberMeowfia...

CVE-2019-14079

USB device fuzzing on Android CVE-2019-14079 This blog post is about a simple bug I found in my android deviceMI A2 - runs stock android using USB device fuzzing and was marked as high severity by google. The bug was in Qualcomm USB driver which was later patched and disclosed in March 2020 Andro...

cve-2016-2431

cve-2016-2431 Qualcomm TrustZone kernel privilege escalation...

cve-2015-6639

cve-2015-6639 Exploit de escalada de privilegios de QSEE usando comandos PRDiag CVE-2015-6639...

CVE-2023-33105-Transient-DOS-in-WLAN-Host-and-Firmware

CVE-2023-33105: DoS transitorio en WLAN Host y Firmware Descripción general Este repositorio contiene el código de explotación para CVE-2023-33105, una vulnerabilidad identificada en dispositivos Qualcomm. El exploit aprovecha tramas de autenticación para realizar un ataque de denegación de...

CVE-2020-11179-Adreno-Qualcomm-GPU

Mi trabajo independiente a partir del poc creado por el investigador de P0 Ben Hawkes Artículo original: https://googleprojectzero.blogspot.com/2020/09/attacking-qualcomm-adreno-gpu.html Mi objetivo es convertir su poc a C, y continuar desde donde él lo dejó y convertir el poc en una shell root, ...

cve-2016-5345

CVE-2016-5345 Escalada de privilegios en el controlador de radio FM de Qualcomm. Exploit probado en un dispositivo ASUS. Ya se requieren algunos privilegios para abrir el controlador de dispositivo vulnerable. CVE original descubierto por Aravind Machiry donfos del Shellphish Grill Team...

CVE-2026-80746 clk: qcom: dispcc-eliza: Fix disp_cc_mdss_mdp_clk_src RCG stall on Eliza EVK

In the Linux kernel, the following vulnerability has been resolved: clk: qcom: dispcc-eliza: Fix dispccmdssmdpclksrc RCG stall on Eliza EVK Eliza EVK eliza-cqs-evk.dts does not have display enabled, however its Display Clock Controller is enabled and references parent clocks from DSI PHYs, which...