CVE-2016-3867

This PoC exploits a race condition in the Android kernel's IPA driver (CVE-2016-3867) by manipulating the `num_hdrs` field during an ioctl operation, leading to a use-after-free or memory corruption. The exploit uses multithreading to trigger the race condition between modifying the header count and the ioctl call.

The repository contains a functional PoC for CVE-2016-3867, a race condition heap overflow vulnerability in the Android kernel's IPA driver. The PoC uses multiple threads to trigger the vulnerability by rapidly modifying the `num_hdrs` field in the `ipa_ioc_add_hdr` structure via ioctl calls.