The Qualcomm DSP Driver - Unexpectedly Excavating an Exploit

Project Zero analyzed kernel panic logs and artifacts from an in-the-wild exploit targeting Qualcomm's adsprpc driver, discovered six distinct vulnerabilities (including UAFs and a 32-bit compat ioctl abuse), and reconstructed a plausible exploit flow involving info leaks and heap spraying (inotify/pipe buffers) that yields kernel arbitrary read/write and privilege escalation on affected Android devices.