CVE-2019-14041

EIP tracks 1 public exploit for CVE-2019-14041. PoCs published by tamirzb.

AI-analyzed exploit summary This repository contains a functional proof-of-concept exploit for CVE-2019-14041, a race condition vulnerability in Qualcomm's qseecom driver. The exploit triggers a kernel panic on affected devices by manipulating ION memory allocations and exploiting a race condition in the QSEECOM_IOCTL_APP_LOADED_QUERY_REQ and QSEECOM_IOCTL_SEND_MODFD_RESP_64 ioctls.

During listener modified response processing, a buffer overrun occurs due to lack of buffer size verification when updating message buffer with physical address information in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in APQ8009, APQ8017, APQ8053, APQ8096AU, APQ8098, MDM9206, MDM9207C, MDM9607, MDM9640, MDM9650, MSM8905, MSM8909W, MSM8917, MSM8953, MSM8996AU, Nicobar, QCM2150, QCS405, QCS605, QM215, Rennell, SA6155P, Saipan, SC8180X, SDA660, SDA845, SDM429, SDM429W, SDM439, SDM450, SDM632, SDM670, SDM710, SDM845, SDX20, SDX24, SDX55, SM6150, SM7150, SM8150, SM8250, SXR1130, SXR2130