Exploitation Summary
EIP tracks 1 public exploit for CVE-2016-2468. PoCs published by gitcollect.
AI-analyzed exploit summary This PoC exploits CVE-2016-2468, a vulnerability in the Qualcomm Adreno GPU driver (kgsl) where an integer overflow in the `kgsl_gpumem_alloc_id` ioctl allows arbitrary memory allocation, leading to potential privilege escalation or denial of service. The code opens `/dev/kgsl-3d0` and passes a maliciously large size value to trigger the vulnerability.
Description
The Qualcomm GPU driver in Android before 2016-06-01 on Nexus 5, 5X, 6, 6P, and 7 devices allows attackers to gain privileges via a crafted application, aka internal bug 27475454.
Exploits (1)
This PoC exploits CVE-2016-2468, a vulnerability in the Qualcomm Adreno GPU driver (kgsl) where an integer overflow in the `kgsl_gpumem_alloc_id` ioctl allows arbitrary memory allocation, leading to potential privilege escalation or denial of service. The code opens `/dev/kgsl-3d0` and passes a maliciously large size value to trigger the vulnerability.
References (1)
Scores
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H