Advanced DMA Reentrancy Techniques to Escape QEMU

This talk examines DMA MMIO reentrancy in QEMU and presents DMA Reflection and Refraction techniques for overcoming exploit prerequisites. It demonstrates a QEMU escape exploit and a way to bypass a patch for a fixed DMA vulnerability.