Exploitation Summary
EIP tracks 5 public exploits for CVE-2014-4322. PoCs published by retme, retme7, laginimaineb.
AI-analyzed exploit summary This exploit targets CVE-2014-4322, a memory corruption vulnerability in the QSEECom driver on Nexus Android 5.0. It leverages the vulnerability to escalate privileges from system to root by manipulating kernel memory via the /dev/qseecom device.
Description
drivers/misc/qseecom.c in the QSEECOM driver for the Linux kernel 3.x, as used in Qualcomm Innovation Center (QuIC) Android contributions for MSM devices and other products, does not validate certain offset, length, and base values within an ioctl call, which allows attackers to gain privileges or cause a denial of service (memory corruption) via a crafted application.
Exploits (5)
This exploit targets CVE-2014-4322, a memory corruption vulnerability in the QSEECom driver on Nexus Android 5.0. It leverages the vulnerability to escalate privileges from system to root by manipulating kernel memory via the /dev/qseecom device.
This is a working privilege escalation exploit for CVE-2014-4322, targeting the QSEECom driver in Nexus Android 4.4/5.0. It leverages memory corruption to escalate from system to root privileges with kernel SELinux context.
This PoC exploits CVE-2014-4322, a vulnerability in the Qualcomm QSEECOM driver, allowing arbitrary kernel code execution via memory corruption and function pointer overwrites. It leverages ION memory allocation and PPPOLAC socket manipulation to achieve privilege escalation.
This repository contains a working proof-of-concept exploit for CVE-2014-4322, targeting a memory corruption vulnerability in the QSEECom driver on Nexus devices running Android 4.4/5.0. The exploit leverages the vulnerability to escalate privileges from system to root, requiring specific SELinux contexts.
This PoC exploits CVE-2014-4322, a memory corruption vulnerability in the QSEECom driver on Android devices, to escalate privileges from system to root. It requires specific SELinux contexts and system privileges to execute successfully.