CVE-2020-11179

Arbitrary read and write to kernel addresses by temporarily overwriting ring buffer pointer and creating a race condition. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon...

CVE-2020-11179

CVE-2020-11179 is a Qualcomm Adreno GPU/kernel-driver vulnerability. The attack targets the KGSL global shared mappings, specifically the scratch buffer used to share data between CPU and GPU. The RPTR (ringbuffer read pointer) is read from the scratch buffer, and the patch for CVE-2019-10567 ran...

Attacking the Qualcomm Adreno GPU

Posted by Ben Hawkes, Project Zero When writing an Android exploit, breaking out of the application sandbox is often a key step. There are a wide range of remote attacks that give you code execution with the privileges of an application like the browser or a messaging application, but a sandbox...