THE QUALCOMM DSP DRIVER - UNEXPECTEDLY EXCAVATING AN EXPLOIT

Summary from the TLDR InfoSec newsletter

This technical analysis examines several vulnerabilities discovered in Qualcomm's adsprpc driver, which Google's Threat Analysis Group found was being exploited in the wild. The researchers identified six different bugs, including CVE-2024-43047, which involved a use-after-free vulnerability that could be triggered through map collisions in the driver's memory management system. By analyzing kernel panic logs from the exploit, the researchers determined that attackers were likely using inotify_event_info objects to exploit the vulnerability, highlighting how chipset drivers remain one of the weakest links in Android's security model in 2024.