cve/2020/CVE-2020-11239.md

CVE-2020-11239

Description

Use after free issue when importing a DMA buffer by using the CPU address of the buffer due to attachment is not cleaned up properly in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

POC

Reference

• https://www.qualcomm.com/company/product-security/bulletins/january-2021-bulletin
• https://www.qualcomm.com/company/product-security/bulletins/january-2021-bulletin

Github

• https://github.com/NetKingJ/android-security-awesome
• https://github.com/NetKingJ/awesome-android-security
• https://github.com/TinyNiko/android_bulletin_notes