cve/2020/CVE-2020-11233.md

CVE-2020-11233

Description

Time-of-check time-of-use race condition While processing partition entries due to newly created buffer was read again from mmc without validation in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

POC

Reference

• https://www.qualcomm.com/company/product-security/bulletins/january-2021-bulletin
• https://www.qualcomm.com/company/product-security/bulletins/january-2021-bulletin

Github

• https://github.com/TinyNiko/android_bulletin_notes