CVE-2019-10583 | ByteOS Network

Vulnerability Details :

CVE-2019-10583

Assigner-qualcomm

Assigner Org ID-2cfc7d3e-20d3-47ac-8db7-1b7285aff15f

Published At-21 Jan, 2020 | 06:30

Updated At-04 Aug, 2024 | 22:24

Use after free issue occurs when camera access sensors data through direct report mode in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in APQ8096AU, MDM9607, MSM8909W, Nicobar, QCS605, SA6155P, SDA845, SDM429W, SDM670, SDM710, SDM845, SM6150, SM8150, SM8250, SXR1130, SXR2130

EPSS History

Score

Latest Score

-

N/A

Percentile

Latest Percentile

-

N/A

▼Common Vulnerabilities and Exposures (CVE)

Assigner:qualcomm

Assigner Org ID:2cfc7d3e-20d3-47ac-8db7-1b7285aff15f

Published At:21 Jan, 2020 | 06:30

Updated At:04 Aug, 2024 | 22:24

▼CVE Numbering Authority (CNA)

Use after free issue occurs when camera access sensors data through direct report mode in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in APQ8096AU, MDM9607, MSM8909W, Nicobar, QCS605, SA6155P, SDA845, SDM429W, SDM670, SDM710, SDM845, SM6150, SM8150, SM8250, SXR1130, SXR2130

Affected Products

Vendor

Qualcomm Technologies, Inc.

Product

Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

Versions

Affected

APQ8096AU, MDM9607, MSM8909W, Nicobar, QCS605, SA6155P, SDA845, SDM429W, SDM670, SDM710, SDM845, SM6150, SM8150, SM8250, SXR1130, SXR2130

Problem Types

Type	CWE ID	Description
text	N/A	Use After Free Issue in Camera

Type: text

CWE ID: N/A

Description: Use After Free Issue in Camera

References

Hyperlink	Resource
https://www.qualcomm.com/company/product-security/bulletins/january-2020-bulletin	x_refsource_CONFIRM

Hyperlink: https://www.qualcomm.com/company/product-security/bulletins/january-2020-bulletin

Resource:

x_refsource_CONFIRM

▼Authorized Data Publishers (ADP)

CVE Program Container

References

Hyperlink	Resource
https://www.qualcomm.com/company/product-security/bulletins/january-2020-bulletin	x_refsource_CONFIRM x_transferred

Hyperlink: https://www.qualcomm.com/company/product-security/bulletins/january-2020-bulletin

Resource:

x_refsource_CONFIRM

x_transferred

▼National Vulnerability Database (NVD)

Source:product-security@qualcomm.com

Published At:21 Jan, 2020 | 07:15

Updated At:24 Jan, 2020 | 14:23

Use after free issue occurs when camera access sensors data through direct report mode in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in APQ8096AU, MDM9607, MSM8909W, Nicobar, QCS605, SA6155P, SDA845, SDM429W, SDM670, SDM710, SDM845, SM6150, SM8150, SM8250, SXR1130, SXR2130

Metrics

Type	Version	Base score	Base severity	Vector
Primary	3.1	7.8	HIGH	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Primary	2.0	7.2	HIGH	AV:L/AC:L/Au:N/C:C/I:C/A:C

Type: Primary

Version: 3.1

Base score: 7.8

Base severity: HIGH

Vector:

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Type: Primary

Version: 2.0

Base score: 7.2

Base severity: HIGH

Vector:

AV:L/AC:L/Au:N/C:C/I:C/A:C

CPE Matches

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:apq8096au:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>apq8096au_firmware>>-

cpe:2.3:o:qualcomm:apq8096au_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:mdm9607:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>mdm9607_firmware>>-

cpe:2.3:o:qualcomm:mdm9607_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>msm8909w_firmware>>-

cpe:2.3:o:qualcomm:msm8909w_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:msm8909w:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>nicobar_firmware>>-

cpe:2.3:o:qualcomm:nicobar_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:nicobar:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>qcs605_firmware>>-

cpe:2.3:o:qualcomm:qcs605_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:qcs605:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>sa6155p_firmware>>-

cpe:2.3:o:qualcomm:sa6155p_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:sa6155p:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>sda845_firmware>>-

cpe:2.3:o:qualcomm:sda845_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:sda845:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>sdm429w_firmware>>-

cpe:2.3:o:qualcomm:sdm429w_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:sdm429w:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>sdm670_firmware>>-

cpe:2.3:o:qualcomm:sdm670_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:sdm670:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>sdm710_firmware>>-

cpe:2.3:o:qualcomm:sdm710_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:sdm710:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>sdm845_firmware>>-

cpe:2.3:o:qualcomm:sdm845_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:sdm845:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>sm6150_firmware>>-

cpe:2.3:o:qualcomm:sm6150_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:sm6150:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>sm8150_firmware>>-

cpe:2.3:o:qualcomm:sm8150_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:sm8150:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>sm8250_firmware>>-

cpe:2.3:o:qualcomm:sm8250_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:sm8250:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>sxr1130_firmware>>-

cpe:2.3:o:qualcomm:sxr1130_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:sxr1130:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>sxr2130_firmware>>-

cpe:2.3:o:qualcomm:sxr2130_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:sxr2130:-:*:*:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
CWE-416	Primary	nvd@nist.gov

CWE ID: CWE-416

Type: Primary

Source: nvd@nist.gov

References

Hyperlink	Source	Resource
https://www.qualcomm.com/company/product-security/bulletins/january-2020-bulletin	product-security@qualcomm.com	Vendor Advisory

Hyperlink: https://www.qualcomm.com/company/product-security/bulletins/january-2020-bulletin

Source: product-security@qualcomm.com

Resource:

Vendor Advisory

Similar CVEs

2908Records found

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.20% / 10.29%

||

7 Day CHG~0.00%

Published-21 Jan, 2020 | 06:30

Updated-04 Aug, 2024 | 22:24

While trying to obtain datad ipc handle during DPL initialization, Heap use-after-free issue can occur if modem SSR occurs at same time in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Wearables in APQ8009, APQ8053, APQ8096AU, MSM8905, MSM8909, MSM8909W, MSM8917, MSM8920, MSM8937, MSM8939, MSM8940, MSM8953, MSM8996AU, MSM8998, Nicobar, QCA6574AU, QCS605, QM215, SDA660, SDM429, SDM429W, SDM439, SDM450, SDM630, SDM632, SDM636, SDM660, SDM670, SDM710, SDM845, SM6150, SM7150, SM8150, SXR1130

Vendor-Qualcomm Technologies, Inc.

Product-sdm429w msm8996au_firmware sdm632_firmware sdm845 sdm450_firmware sdm632 sdm439 sdm429 msm8940_firmware sm7150_firmware sm6150 msm8909w_firmware msm8996au sdm429w_firmware sm7150 apq8009_firmware msm8917 sdm670 qcs605_firmware sdm670_firmware sdm636 msm8939 qcs605 msm8937_firmware sdm429_firmware msm8905_firmware qca6574au_firmware sda660 sxr1130_firmware sxr1130 apq8009 msm8909w msm8909_firmware apq8053_firmware nicobar msm8920 msm8953 sdm450 sdm636_firmware msm8998_firmware sdm660 msm8920_firmware sdm630 qca6574au sdm710 qm215 sdm710_firmware msm8939_firmware msm8937 msm8905 sm8150_firmware msm8909 apq8096au sdm439_firmware sdm630_firmware sda660_firmware qm215_firmware msm8940 apq8053 apq8096au_firmware msm8953_firmware sm6150_firmware msm8917_firmware msm8998 sm8150 nicobar_firmware sdm660_firmware sdm845_firmware Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Wearables

CWE ID-CWE-416

Use After Free

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-8.4||HIGH

EPSS-0.11% / 1.60%

||

7 Day CHG~0.00%

Published-05 Aug, 2024 | 14:21

Updated-26 Nov, 2024 | 16:41

Use After Free in Graphics Linux

Memory corruption when memory mapped in a VBO is not unmapped by the GPU SMMU.

Vendor-Qualcomm Technologies, Inc.

Product-qam8255p_firmware snapdragon_8_gen_1_mobile_platform wsa8830 qam8650p qam8775p qamsrv1m wsa8840 wcn3950_firmware srv1l_firmware qca6595au_firmware snapdragon_480_5g_mobile_platform video_collaboration_vc3_platform wcd9370 qcm5430_firmware qcs6125_firmware snapdragon_480_5g_mobile_platform_firmware qamsrv1h wcd9385_firmware qam8295p wcn3950 fastconnect_6200 qamsrv1h_firmware qam8295p_firmware sa9000p_firmware snapdragon_695_5g_mobile_platform_firmware qca6574au_firmware sa7255p wsa8845h_firmware wcd9375_firmware snapdragon_8_gen_3_mobile_platform qca6595au snapdragon_w5\+_gen_1_wearable_platform_firmware sa8620p_firmware sa6155p_firmware qca6678aq_firmware sa8775p_firmware qcs6490 wsa8840_firmware qca6698aq qcs6125 video_collaboration_vc5_platform wcn3988_firmware srv1h sa7775p_firmware fastconnect_6700_firmware sa8195p wsa8810_firmware sw5100 wsa8845h wcd9395_firmware sa8255p_firmware sa6155p qcs7230 qca6698aq_firmware sa7775p qcs5430 qam8620p snapdragon_480\+_5g_mobile_platform_\(sm4350-ac\)wcd9385 sa8770p_firmware sa8255p qam8775p_firmware qca6696_firmware qcs6490_firmware qca6797aq wcd9375 wcd9390 wsa8830_firmware wsa8815_firmware wcn3988 wsa8835_firmware qcm6490 sa8195p_firmware video_collaboration_vc5_platform_firmware sa8295p_firmware sa8770p qcm6125_firmware wcd9380_firmware sw5100p snapdragon_w5\+_gen_1_wearable_platform qca6595 qcs7230_firmware wsa8835 qca6574 wcd9380 fastconnect_6700 snapdragon_4_gen_1_mobile_platform_firmware qca6574a snapdragon_480\+_5g_mobile_platform_\(sm4350-ac\)_firmware video_collaboration_vc3_platform_firmware wcn3980 wsa8845 sa8650p sa9000p qca6574_firmware wsa8815 wsa8845_firmware snapdragon_4_gen_1_mobile_platform qcs8250 sa8775p qca6574a_firmware fastconnect_6200_firmware wcn3980_firmware qca6391 sa8295p fastconnect_7800 qca6678aq qcm6490_firmware sa8650p_firmware fastconnect_6900 srv1h_firmware fastconnect_6900_firmware video_collaboration_vc1_platform_firmware qca6797aq_firmware qca6574au sa8155p_firmware srv1l sa7255p_firmware qcs8250_firmware qcm6125 wsa8810 sa8620p fastconnect_7800_firmware sw5100p_firmware snapdragon_8_gen_1_mobile_platform_firmware srv1m_firmware qamsrv1m_firmware qcm5430 qam8650p_firmware qca6595_firmware wcd9395 qcs5430_firmware qca6696 qca6391_firmware wcd9370_firmware wcd9390_firmware snapdragon_8_gen_3_mobile_platform_firmware sa8155p snapdragon_695_5g_mobile_platform video_collaboration_vc1_platform srv1m sw5100_firmware qam8620p_firmware qam8255p Snapdragon qam8255p_firmware qualcomm_video_collaboration_vc1_platform_firmware wcd9380_firmware qcs7230_firmware wcn3950_firmware srv1l_firmware qca6595au_firmware snapdragon_4_gen_1_mobile_platform_firmware qcm5430_firmware qcs6125_firmware snapdragon_480_5g_mobile_platform_firmware qualcomm_video_collaboration_vc3_platform_firmware wcd9385_firmware qamsrv1h_firmware qca6574_firmware wsa8845_firmware qam8295p_firmware sa9000p_firmware qca6574a_firmware fastconnect_6200_firmware qca6574au_firmware snapdragon_695_5g_mobile_platform_firmware wcd9375_firmware wsa8845h_firmware wcn3980_firmware sa8620p_firmware sa6155p_firmware qca6678aq_firmware sa8775p_firmware qcm6490_firmware sa8650p_firmware wsa8840_firmware fastconnect_6900_firmware srv1h_firmware qca6797aq_firmware wcn3988_firmware sa8155p_firmware sa7775p_firmware fastconnect_6700_firmware sa7255p_firmware wsa8810_firmware qcs8250_firmware fastconnect_7800_firmware wcd9395_firmware sa8255p_firmware sw5100p_firmware snapdragon_8_gen_1_mobile_platform_firmware qamsrv1m_firmware qca6698aq_firmware srv1m_firmware qam8650p_firmware sa8770p_firmware qam8775p_firmware qca6696_firmware qca6595_firmware qcs6490_firmware qcs5430_firmware qca6391_firmware wcd9370_firmware qualcomm_video_collaboration_vc5_platform_firmware snapdragon_8_gen_3_mobile_platform_firmware wcd9390_firmware wsa8830_firmware wsa8815_firmware wsa8835_firmware sa8195p_firmware sw5100_firmware qam8620p_firmware sa8295p_firmware qcm6125_firmware

CWE ID-CWE-416

Use After Free

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.19% / 9.02%

||

7 Day CHG~0.00%

Published-06 Nov, 2019 | 17:11

Updated-04 Aug, 2024 | 22:24

Lack of check for a negative value returned for get_clk is wrongly interpreted as valid pointer and lead to use after free in clk driver in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in MDM9150, MDM9206, MDM9607, MDM9640, MDM9650, MSM8909W, MSM8996AU, QCS405, QCS605, Qualcomm 215, SD 210/SD 212/SD 205, SD 425, SD 427, SD 430, SD 435, SD 439 / SD 429, SD 450, SD 625, SD 632, SD 636, SD 665, SD 675, SD 712 / SD 710 / SD 670, SD 730, SD 820, SD 820A, SD 835, SD 845 / SD 850, SD 855, SDA660, SDM439, SDM630, SDM660, SDX20, SDX24

Vendor-Qualcomm Technologies, Inc.

Product-sd_850 mdm9150_firmware sd_632 mdm9640_firmware sd_820a sd_675 msm8996au_firmware sd_439 sd_670_firmware sd_429 sdx24 sdm439 mdm9650 sd_636 msm8909w_firmware msm8996au sd_820 sd_450_firmware sd_845_firmware sd_820a_firmware qcs605_firmware sd_675_firmware mdm9206 sd_425_firmware sd_665 sdx24_firmware sd_625_firmware sd_450 sd_845 mdm9206_firmware qcs605 sd_632_firmware sd_835_firmware mdm9650_firmware sd_835 sda660 sd_210_firmware msm8909w sd_665_firmware sd_205_firmware sd_212 sd_427_firmware sd_712 sd_855 sd_730_firmware qualcomm_215 sdx20 sd_425 sdm660 sd_430_firmware mdm9607_firmware sd_435 sd_710_firmware sdm630 qcs405 sd_625 sd_820_firmware sd_210 mdm9607 sd_636_firmware sd_439_firmware qualcomm_215_firmware mdm9150 sd_429_firmware sd_730 sd_212_firmware sd_850_firmware sd_855_firmware sdm439_firmware qcs405_firmware sd_712_firmware sdm630_firmware sda660_firmware sd_430 sd_427 sd_670 sd_435_firmware sdx20_firmware sd_710 sd_205 sdm660_firmware mdm9640 Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

CWE ID-CWE-416

Use After Free

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.20% / 10.29%

||

7 Day CHG~0.00%

Published-21 Jan, 2020 | 06:30

Updated-04 Aug, 2024 | 22:24

Use after free issue due to using of invalidated iterator to delete an object in sensors HAL in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in APQ8096AU, MSM8909W, Nicobar, QCS605, SA6155P, SDA845, SDM429W, SDM670, SDM710, SDM845, SM6150, SM8150, SM8250, SXR1130, SXR2130

Vendor-Qualcomm Technologies, Inc.

Product-sa6155p_firmware sdm429w sdm845 mdm9607_firmware sm8250_firmware sdm710 msm8909w_firmware mdm9607 sm6150 sdm429w_firmware sdm710_firmware sa6155p sdm670 sxr2130 qcs605_firmware sdm670_firmware sm8150_firmware sxr2130_firmware apq8096au sda845_firmware qcs605 apq8096au_firmware sm6150_firmware sm8250 sm8150 sxr1130_firmware nicobar_firmware msm8909w sxr1130 sda845 nicobar sdm845_firmware Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

CWE ID-CWE-416

Use After Free

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.19% / 8.72%

||

7 Day CHG~0.00%

Published-18 Dec, 2019 | 05:25

Updated-04 Aug, 2024 | 22:24

Use after free of a pointer in iWLAN scenario during netmgr state transition to CONNECT in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking in APQ8009, APQ8017, APQ8053, APQ8064, APQ8096AU, APQ8098, IPQ4019, IPQ8064, IPQ8074, MDM9150, MDM9206, MDM9207C, MDM9607, MDM9640, MDM9650, MSM8905, MSM8909, MSM8909W, MSM8917, MSM8920, MSM8937, MSM8939, MSM8940, MSM8953, MSM8996AU, MSM8998, QCA6574AU, QCS405, QCS605, SDA660, SDA845, SDM429, SDM439, SDM630, SDM632, SDM636, SDM660, SDM670, SDM710, SDM845, SDX20, SDX24, SDX55, SM6150, SM7150, SM8150, SM8250, SXR1130, SXR2130

Vendor-Qualcomm Technologies, Inc.

Product-mdm9150_firmware mdm9640_firmware sdm632_firmware msm8996au_firmware sdm845 sdm632 sdx24 sdm439 mdm9650 sdm429 msm8940_firmware sm7150_firmware sm6150 msm8909w_firmware msm8996au sm7150 apq8009_firmware msm8917 sdm670 sxr2130 qcs605_firmware ipq4019_firmware mdm9206 sdm670_firmware sdx24_firmware ipq8074 sdm636 sda845_firmware apq8098 mdm9206_firmware msm8939 qcs605 msm8937_firmware mdm9650_firmware sdm429_firmware msm8905_firmware qca6574au_firmware sda660 sdx55_firmware ipq8064 sxr1130_firmware apq8064_firmware sxr1130 msm8909w apq8009 msm8909_firmware apq8053_firmware ipq8064_firmware sda845 msm8920 msm8953 sdm636_firmware apq8064 sdm845_firmware apq8098_firmware sdx20 msm8998_firmware sdm660 msm8920_firmware sdm630 mdm9607_firmware sm8250_firmware qcs405 ipq8074_firmware qca6574au sdm710 mdm9607 apq8017_firmware sdm710_firmware msm8939_firmware mdm9150 msm8937 mdm9207c_firmware msm8905 mdm9207c sm8150_firmware msm8909 sxr2130_firmware apq8096au sdm439_firmware qcs405_firmware sdm630_firmware sda660_firmware ipq4019 sdx55 msm8953_firmware msm8940 sm6150_firmware apq8053 apq8096au_firmware msm8917_firmware sm8250 msm8998 sm8150 sdx20_firmware apq8017 sdm660_firmware mdm9640 Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking

CWE ID-CWE-416

Use After Free

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-8.4||HIGH

EPSS-0.16% / 5.16%

||

7 Day CHG~0.00%

Published-06 May, 2024 | 14:32

Updated-11 Aug, 2025 | 15:06

Use After Free in Graphics Linux

Memory corruption when the IOCTL call is interrupted by a signal.

Vendor-Qualcomm Technologies, Inc.

Product-qcm8550_firmware sw5100p wsa8845_firmware wsa8832 qca6595 srv1m wcd9370 qca6696 wcd9395_firmware snapdragon_8\+_gen_1_mobile fastconnect_6700 snapdragon_685_4g_mobile wsa8815_firmware wsa8832_firmware sa8195p_firmware wcd9395 sg8275p_firmware qca6574au_firmware qcm4490_firmware qca6574au wcd9390 sa8620p_firmware wcn3950 wsa8810_firmware wsa8845h_firmware flight_rb5_5g sa9000p_firmware srv1h qca6797aq_firmware talynplus_firmware sa8770p ssg2115p sw5100_firmware qca6595_firmware qcs7230 fastconnect_6900 fastconnect_7800_firmware snapdragon_w5\+_gen_1_wearable_firmware sa7255p wcd9385_firmware fastconnect_6900_firmware qam8255p_firmware robotics_rb5_firmware wcd9380 qam8255p sxr2230p qcs4490 snapdragon_680_4g_mobile wsa8845 sa6155p sxr1230p wsa8810 qam8650p video_collaboration_vc5_platform_firmware sa9000p srv1h_firmware sw5100 qca6595au sxr2250p_firmware sa6155p_firmware snapdragon_685_4g_mobile_firmware wsa8840 srv1m_firmware qcs8550_firmware snapdragon_8_gen_2_mobile_firmware qca6698aq_firmware snapdragon_4_gen_2_mobile_firmware wcd9385 snapdragon_8_gen_1_mobile qcs4490_firmware snapdragon_680_4g_mobile_firmware sa8255p qcs7230_firmware sxr1230p_firmware wcd9390_firmware snapdragon_8_gen_2_mobile sg8275p wcd9370_firmware flight_rb5_5g_firmware ssg2125p sa7255p_firmware qca6574a snapdragon_8\+_gen_2_mobile qcm4490 sa8195p qamsrv1m robotics_rb5 talynplus qam8650p_firmware video_collaboration_vc5_platform sm8550p_firmware sxr2250p qcm8550 wcn3988 qrb5165n_firmware qca6574 sa8775p wsa8835 qca6595au_firmware qca6391_firmware sxr2230p_firmware wsa8840_firmware sw5100p_firmware sa8775p_firmware qamsrv1h qca6696_firmware wsa8845h wcd9380_firmware qca6574_firmware sa8155p_firmware wsa8815 sg4150p sa8155p sd_8_gen1_5g wsa8830 qam8775p qca6797aq snapdragon_ar2_gen_1_firmware sm8550p qcm4325_firmware sa8620p sa8255p_firmware qca6574a_firmware qamsrv1m_firmware snapdragon_4_gen_2_mobile sa8650p_firmware qcm4325 sd_8_gen1_5g_firmware wcd9375_firmware qca6391 qca6698aq sg4150p_firmware ssg2125p_firmware wcn3950_firmware sa8770p_firmware qrb5165n qcs8550 fastconnect_7800 sa8650p qam8775p_firmware snapdragon_8\+_gen_2_mobile_firmware wcd9375 snapdragon_ar2_gen_1 wcn3988_firmware fastconnect_6700_firmware qamsrv1h_firmware snapdragon_8\+_gen_1_mobile_firmware wsa8835_firmware ssg2115p_firmware wsa8830_firmware snapdragon_w5\+_gen_1_wearable snapdragon_8_gen_1_mobile_firmware Snapdragon qam8255p_firmware robotics_rb5_platform_firmware sa6155p_firmware sa8620p_firmware qcm4490_firmware qcm8550_firmware qcs4490_firmware sa8775p_firmware sa8650p_firmware sg8275p_firmware snapdragon fastconnect_6900_firmware srv1h_firmware qcs7230_firmware qcs8550_firmware qca6797aq_firmware flight_rb5_5g_platform_firmware sa8155p_firmware fastconnect_6700_firmware sa7255p_firmware fastconnect_7800_firmware qca6595au_firmware snapdragon_8_gen_1_mobile_platform_firmware snapdragon_4_gen_2_mobile_platform_firmware qca6698aq_firmware qamsrv1m_firmware snapdragon_8_gen_2_mobile_platform_firmware qam8650p_firmware sa8770p_firmware qam8775p_firmware qrb5165n_firmware qca6696_firmware qca6595_firmware qca6391_firmware qcm4325_firmware qamsrv1h_firmware qca6574_firmware sd_8_gen1_5g_firmware sm8550p_firmware qualcomm_video_collaboration_vc5_platform_firmware sa9000p_firmware qca6574a_firmware qca6574au_firmware sa8195p_firmware snapdragon_680_4g_mobile_platform_firmware

CWE ID-CWE-416

Use After Free

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.20% / 10.29%

||

7 Day CHG~0.00%

Published-21 Jan, 2020 | 06:30

Updated-04 Aug, 2024 | 22:24

Possible integer overflow happens when mmap find function will increment refcount every time when it invokes and can lead to use after free issue in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables in APQ8009, APQ8053, MDM9607, MDM9640, MSM8909W, MSM8917, MSM8953, Nicobar, QCS605, QM215, SDA845, SDM429, SDM429W, SDM439, SDM450, SDM632, SDM660, SDM670, SDM710, SDM845, SDX24, SDX55, SM6150, SM8150, SM8250, SXR1130, SXR2130

Vendor-Qualcomm Technologies, Inc.

Product-mdm9640_firmware msm8953 sdm450 sdm845_firmware sdm429w sdm632_firmware sdm845 sdm450_firmware sdm632 sdm660 sdx24 sdm439 mdm9607_firmware sm8250_firmware sdm429 sdm710 msm8909w_firmware mdm9607 qm215 sdm429w_firmware sm6150 sdm710_firmware apq8009 apq8009_firmware msm8917 sdm670 sxr2130 qcs605_firmware sdm670_firmware sm8150_firmware sdx24_firmware sxr2130_firmware sdm439_firmware sda845_firmware qm215_firmware qcs605 sdx55 msm8953_firmware apq8053 sm6150_firmware sm8250 msm8917_firmware sdm429_firmware sm8150 sxr1130_firmware sdx55_firmware nicobar_firmware msm8909w sxr1130 apq8053_firmware sdm660_firmware sda845 nicobar mdm9640 Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables

CWE ID-CWE-416

Use After Free

CWE ID-CWE-190

Integer Overflow or Wraparound

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.19% / 9.02%

||

7 Day CHG~0.00%

Published-30 Sep, 2019 | 15:40

Updated-04 Aug, 2024 | 22:24

Use after free issue occurs If another instance of open for voice_svc node has been called from application without closing the previous one. in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in MDM9150, MDM9206, MDM9607, MDM9640, MDM9650, MSM8909W, MSM8996AU, QCS605, Qualcomm 215, SD 210/SD 212/SD 205, SD 425, SD 427, SD 430, SD 435, SD 439 / SD 429, SD 450, SD 615/16/SD 415, SD 625, SD 632, SD 636, SD 665, SD 675, SD 712 / SD 710 / SD 670, SD 730, SD 820, SD 820A, SD 835, SD 845 / SD 850, SD 855, SDA660, SDM439, SDM630, SDM660, SDX20, SDX24

Vendor-Qualcomm Technologies, Inc.

Product-sd_850 mdm9150_firmware sd_632 mdm9640_firmware sd_820a sd_675 msm8996au_firmware sd_439 sd_670_firmware sd_429 sdx24 sdm439 mdm9650 sd_636 sd_615_firmware msm8909w_firmware msm8996au sd_820 sd_450_firmware sd_845_firmware sd_820a_firmware qcs605_firmware sd_675_firmware mdm9206 sd_425_firmware sd_665 sdx24_firmware sd_625_firmware sd_450 sd_845 mdm9206_firmware qcs605 sd_632_firmware sd_835_firmware mdm9650_firmware sd_835 sda660 sd_210_firmware sd_415_firmware msm8909w sd_665_firmware sd_616_firmware sd_205_firmware sd_415 sd_212 sd_427_firmware sd_712 sd_855 sd_730_firmware qualcomm_215 sdx20 sd_616 sd_425 sdm660 sd_430_firmware mdm9607_firmware sd_435 sd_615 sd_710_firmware sdm630 sd_625 sd_820_firmware sd_210 mdm9607 sd_636_firmware sd_439_firmware qualcomm_215_firmware mdm9150 sd_429_firmware sd_730 sd_212_firmware sd_850_firmware sd_855_firmware sdm439_firmware sd_712_firmware sdm630_firmware sda660_firmware sd_430 sd_427 sd_670 sd_435_firmware sdx20_firmware sd_710 sd_205 sdm660_firmware mdm9640 Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

CWE ID-CWE-416

Use After Free

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-8.4||HIGH

EPSS-0.11% / 1.55%

||

7 Day CHG~0.00%

Published-05 Aug, 2024 | 14:21

Updated-26 Nov, 2024 | 16:43

Use After Free in Graphics Linux

Memory corruption when kernel driver attempts to trigger hardware fences.

Vendor-Qualcomm Technologies, Inc.

Product-qam8255p_firmware wsa8830 qam8650p qam8775p qamsrv1m wsa8840 wcn3950_firmware srv1l_firmware qca6595au_firmware snapdragon_480_5g_mobile_platform video_collaboration_vc3_platform wcd9370 qcm5430_firmware qcs6125_firmware snapdragon_480_5g_mobile_platform_firmware qamsrv1h wcd9385_firmware qam8295p wcn3950 fastconnect_6200 qamsrv1h_firmware qam8295p_firmware sa9000p_firmware snapdragon_695_5g_mobile_platform_firmware qca6574au_firmware sa7255p wsa8845h_firmware wcd9375_firmware snapdragon_8_gen_3_mobile_platform qca6595au snapdragon_w5\+_gen_1_wearable_platform_firmware sa8620p_firmware sa6155p_firmware qca6678aq_firmware sa8775p_firmware qcs6490 wsa8840_firmware qca6698aq qcs6125 video_collaboration_vc5_platform wcn3988_firmware srv1h sa7775p_firmware fastconnect_6700_firmware sa8195p wsa8810_firmware sw5100 wsa8845h wcd9395_firmware sa8255p_firmware sa6155p qcs7230 qca6698aq_firmware sa7775p qcs5430 qam8620p snapdragon_480\+_5g_mobile_platform_\(sm4350-ac\)wcd9385 sa8770p_firmware sa8255p qam8775p_firmware qca6696_firmware qcs6490_firmware qca6797aq wcd9375 wcd9390 wsa8830_firmware wsa8815_firmware wcn3988 wsa8835_firmware qcm6490 sa8195p_firmware video_collaboration_vc5_platform_firmware sa8295p_firmware sa8770p qcm6125_firmware wcd9380_firmware sw5100p snapdragon_w5\+_gen_1_wearable_platform qca6595 qcs7230_firmware wsa8835 qca6574 wcd9380 fastconnect_6700 snapdragon_4_gen_1_mobile_platform_firmware qca6574a snapdragon_480\+_5g_mobile_platform_\(sm4350-ac\)_firmware video_collaboration_vc3_platform_firmware wcn3980 wsa8845 sa8650p sa9000p qca6574_firmware wsa8815 wsa8845_firmware snapdragon_4_gen_1_mobile_platform qcs8250 sa8775p qca6574a_firmware fastconnect_6200_firmware wcn3980_firmware qca6391 sa8295p fastconnect_7800 qca6678aq qcm6490_firmware sa8650p_firmware fastconnect_6900 srv1h_firmware fastconnect_6900_firmware video_collaboration_vc1_platform_firmware qca6797aq_firmware qca6574au sa8155p_firmware srv1l sa7255p_firmware qcs8250_firmware qcm6125 wsa8810 sa8620p fastconnect_7800_firmware sw5100p_firmware srv1m_firmware qamsrv1m_firmware qcm5430 qam8650p_firmware qca6595_firmware wcd9395 qcs5430_firmware qca6696 qca6391_firmware wcd9370_firmware wcd9390_firmware snapdragon_8_gen_3_mobile_platform_firmware sa8155p snapdragon_695_5g_mobile_platform video_collaboration_vc1_platform srv1m sw5100_firmware qam8620p_firmware qam8255p Snapdragon qualcomm_video_collaboration_vc1_platform_firmware qam8255p_firmware wcd9380_firmware qcs7230_firmware wcn3950_firmware srv1l_firmware qca6595au_firmware snapdragon_4_gen_1_mobile_platform_firmware qcm5430_firmware qcs6125_firmware snapdragon_480_5g_mobile_platform_firmware qualcomm_video_collaboration_vc3_platform_firmware wcd9385_firmware qamsrv1h_firmware qca6574_firmware wsa8845_firmware qam8295p_firmware sa9000p_firmware qca6574a_firmware fastconnect_6200_firmware qca6574au_firmware snapdragon_695_5g_mobile_platform_firmware wcd9375_firmware wsa8845h_firmware wcn3980_firmware sa8620p_firmware sa6155p_firmware qca6678aq_firmware sa8775p_firmware qcm6490_firmware sa8650p_firmware wsa8840_firmware fastconnect_6900_firmware srv1h_firmware qca6797aq_firmware wcn3988_firmware sa8155p_firmware sa7775p_firmware fastconnect_6700_firmware sa7255p_firmware wsa8810_firmware qcs8250_firmware fastconnect_7800_firmware wcd9395_firmware sa8255p_firmware sw5100p_firmware qamsrv1m_firmware qca6698aq_firmware srv1m_firmware qam8650p_firmware sa8770p_firmware qam8775p_firmware qca6696_firmware qcs6490_firmware qca6595_firmware qcs5430_firmware qca6391_firmware wcd9370_firmware qualcomm_video_collaboration_vc5_platform_firmware snapdragon_8_gen_3_mobile_platform_firmware wcd9390_firmware wsa8830_firmware wsa8815_firmware wsa8835_firmware sa8195p_firmware sw5100_firmware qam8620p_firmware sa8295p_firmware qcm6125_firmware

CWE ID-CWE-416

Use After Free

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-8.4||HIGH

EPSS-0.11% / 1.55%

||

7 Day CHG~0.00%

Published-05 Aug, 2024 | 14:21

Updated-26 Nov, 2024 | 16:42

Use After Free in Graphics Linux

Memory corruption while processing graphics kernel driver request to create DMA fence.

Vendor-Qualcomm Technologies, Inc.

Product-qam8255p_firmware snapdragon_8_gen_1_mobile_platform talynplus_firmware snapdragon_662_mobile_platform_firmware wsa8830 sxr2230p_firmware qam8650p sg8275p_firmware qam8775p qamsrv1m flight_rb5_5g_platform flight_rb5_5g_platform_firmware wsa8840 wcn3950_firmware srv1l_firmware qca6595au_firmware snapdragon_480_5g_mobile_platform video_collaboration_vc3_platform wcd9370 ssg2115p qcm5430_firmware qcs6125_firmware snapdragon_460_mobile_platform_firmware snapdragon_480_5g_mobile_platform_firmware wcn3990_firmware qrb5165n_firmware snapdragon_8_gen_2_mobile_platform qamsrv1h wcd9385_firmware qam8295p wcn3950 talynplus fastconnect_6200 qamsrv1h_firmware sd_8_gen1_5g_firmware snapdragon_460_mobile_platform qam8295p_firmware sa9000p_firmware snapdragon_695_5g_mobile_platform_firmware qca6574au_firmware sa7255p snapdragon_4_gen_2_mobile_platform qca6595au snapdragon_8_gen_3_mobile_platform wcd9375_firmware wsa8845h_firmware snapdragon_680_4g_mobile_platform_firmware qrb5165n snapdragon_w5\+_gen_1_wearable_platform_firmware sa8620p_firmware sa6155p_firmware qcm8550_firmware qca6678aq_firmware sa8775p_firmware qcs6490 wsa8840_firmware qca6698aq qcs6125 video_collaboration_vc5_platform qcs8550_firmware wcn3988_firmware srv1h sa7775p_firmware snapdragon_8\+_gen_1_mobile_platform fastconnect_6700_firmware sa8195p wsa8810_firmware vision_intelligence_400_platform sw5100 wsa8845h snapdragon_ar2_gen_1_platform_firmware sa8255p_firmware sa6155p qcs7230 sg4150p wcd9335 wcd9395_firmware qca6698aq_firmware qcm4490 sa7775p qam8620p qcs5430 snapdragon_480\+_5g_mobile_platform_\(sm4350-ac\)sxr2250p sa8770p_firmware wcd9341 qam8775p_firmware sa8255p wcd9385 qca6696_firmware qcs6490_firmware qca6797aq wcd9375 wcd9390 robotics_rb5_platform vision_intelligence_400_platform_firmware snapdragon_662_mobile_platform wsa8830_firmware qcm6490 wcn3988 wsa8815_firmware wsa8835_firmware sa8195p_firmware video_collaboration_vc5_platform_firmware sa8295p_firmware sxr2250p_firmware sg4150p_firmware sa8770p snapdragon_8_gen_2_mobile_platform_firmware qcm6125_firmware qcm4325 robotics_rb5_platform_firmware wcd9380_firmware ssg2125p wcn3990 sw5100p snapdragon_w5\+_gen_1_wearable_platform qca6595 qcm8550 qcs7230_firmware wsa8835 qca6574 sxr1230p_firmware snapdragon_8\+_gen_2_mobile_platform_firmware sd_8_gen1_5g wcd9380 snapdragon_685_4g_mobile_platform_\(sm6225-ad\)_firmware fastconnect_6700 snapdragon_4_gen_1_mobile_platform_firmware snapdragon_4_gen_2_mobile_platform_firmware ssg2125p_firmware qca6574a sxr1230p snapdragon_480\+_5g_mobile_platform_\(sm4350-ac\)_firmware video_collaboration_vc3_platform_firmware sg8275p wcd9335_firmware wcn3980 wsa8845 qcm4325_firmware sa8650p qca6574_firmware sa9000p wsa8815 sxr2230p wsa8845_firmware snapdragon_4_gen_1_mobile_platform qcs8250 qca6574a_firmware fastconnect_6200_firmware sa8775p wcn3980_firmware qca6391 sa8295p fastconnect_7800 qcm4490_firmware qcs4490_firmware qca6678aq qcm6490_firmware sa8650p_firmware wsa8832_firmware fastconnect_6900 fastconnect_6900_firmware srv1h_firmware video_collaboration_vc1_platform_firmware qca6797aq_firmware qca6574au sa8155p_firmware srv1l sa7255p_firmware qcs8250_firmware wcd9341_firmware fastconnect_7800_firmware qcm6125 sa8620p snapdragon_8\+_gen_2_mobile_platform wsa8810 wsa8832 sw5100p_firmware sm8550p snapdragon_680_4g_mobile_platform snapdragon_8_gen_1_mobile_platform_firmware qamsrv1m_firmware snapdragon_ar2_gen_1_platform qcm5430 srv1m_firmware qam8650p_firmware qcs4490 qca6595_firmware wcd9395 qca6696 qcs5430_firmware qca6391_firmware qcs8550 wcd9370_firmware sm8550p_firmware snapdragon_8_gen_3_mobile_platform_firmware wcd9390_firmware sa8155p snapdragon_695_5g_mobile_platform video_collaboration_vc1_platform srv1m snapdragon_8\+_gen_1_mobile_platform_firmware ssg2115p_firmware sw5100_firmware qam8620p_firmware qam8255p snapdragon_685_4g_mobile_platform_\(sm6225-ad\)Snapdragon qam8255p_firmware qualcomm_video_collaboration_vc1_platform_firmware talynplus_firmware snapdragon_662_mobile_platform_firmware robotics_rb5_platform_firmware wcd9380_firmware sxr2230p_firmware sg8275p_firmware qcs7230_firmware flight_rb5_5g_platform_firmware sxr1230p_firmware wcn3950_firmware srv1l_firmware qca6595au_firmware snapdragon_4_gen_1_mobile_platform_firmware sa8295p_firmware snapdragon_4_gen_2_mobile_platform_firmware ssg2125p_firmware qcm5430_firmware qcs6125_firmware snapdragon_460_mobile_platform_firmware snapdragon_480_5g_mobile_platform_firmware wcn3990_firmware qrb5165n_firmware wcd9335_firmware qualcomm_video_collaboration_vc3_platform_firmware wcd9385_firmware qcm4325_firmware qamsrv1h_firmware qca6574_firmware sd_8_gen1_5g_firmware wsa8845_firmware qam8295p_firmware sa9000p_firmware qca6574a_firmware snapdragon_695_5g_mobile_platform_firmware qca6574au_firmware fastconnect_6200_firmware wcd9375_firmware wsa8845h_firmware wcn3980_firmware snapdragon_680_4g_mobile_platform_firmware sa8620p_firmware sa6155p_firmware qcm8550_firmware qcm4490_firmware qca6678aq_firmware qcs4490_firmware sa8775p_firmware qcm6490_firmware wsa8840_firmware sa8650p_firmware wsa8832_firmware fastconnect_6900_firmware srv1h_firmware qcs8550_firmware wcn3988_firmware qca6797aq_firmware sa8155p_firmware sa7775p_firmware fastconnect_6700_firmware sa7255p_firmware wsa8810_firmware qcs8250_firmware wcd9341_firmware fastconnect_7800_firmware snapdragon_ar2_gen_1_platform_firmware sa8255p_firmware wcd9395_firmware sw5100p_firmware snapdragon_8_gen_1_mobile_platform_firmware qca6698aq_firmware qamsrv1m_firmware srv1m_firmware qam8650p_firmware sa8770p_firmware qam8775p_firmware qca6696_firmware qcs6490_firmware qca6595_firmware qcs5430_firmware qca6391_firmware wcd9370_firmware sm8550p_firmware qualcomm_video_collaboration_vc5_platform_firmware vision_intelligence_400_platform_firmware snapdragon_8_gen_3_mobile_platform_firmware wcd9390_firmware wsa8830_firmware wsa8815_firmware wsa8835_firmware sa8195p_firmware ssg2115p_firmware sw5100_firmware qam8620p_firmware sxr2250p_firmware sg4150p_firmware snapdragon_8_gen_2_mobile_platform_firmware qcm6125_firmware

CWE ID-CWE-416

Use After Free

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-8.4||HIGH

EPSS-0.15% / 4.66%

||

7 Day CHG~0.00%

Published-01 Jul, 2024 | 14:17

Updated-01 Aug, 2024 | 23:06

Use After Free in Graphics

Memory corruption when IOMMU unmap operation fails, the DMA and anon buffers are getting released.

Vendor-Qualcomm Technologies, Inc.

Product-qca9377_firmware qam8255p_firmware snapdragon_8_gen_1_mobile_platform sm7325-ae_firmware sa6150p_firmware qcs610 315_5g_iot_modem_firmware qca8337 sg8275p_firmware qam8775p qamsrv1m snapdragon_820_automotive_platform_firmware snapdragon_888_5g_mobile_platform wsa8840 snapdragon_212_mobile_platform wcn3950_firmware sa8150p_firmware qcs2290 qca6595au_firmware video_collaboration_vc3_platform snapdragon_480_5g_mobile_platform qca6335 csra6620_firmware csra6640_firmware qcm5430_firmware qcs6125_firmware snapdragon_460_mobile_platform_firmware snapdragon_480_5g_mobile_platform_firmware qam8295p wcn3950 qcn6024_firmware sm4125 mdm9628 sd_8_gen1_5g_firmware wcn3660b sm7150-ac qsm8350_firmware snapdragon_460_mobile_platform qsm8350 snapdragon_660_mobile_platform_firmware qca6688aq sm7315_firmware sm7325-ae snapdragon_695_5g_mobile_platform_firmware qca6574au_firmware wcd9375_firmware qca8081_firmware sm6225-ad qca6420 snapdragon_xr2\+_gen_1_platform snapdragon_auto_5g_modem-rf_firmware qca6678aq_firmware smart_audio_400_platform_firmware sm6225-ad_firmware qrb5165m_firmware wsa8840_firmware qca6698aq qcs6125 sa4155p_firmware robotics_rb3_platform_firmware sm7250-ab_firmware qca6430 robotics_rb3_platform sa7775p_firmware snapdragon_8\+_gen_1_mobile_platform wcd9340 snapdragon_720g_mobile_platform snapdragon_780g_5g_mobile_platform sw5100 qca6436 sa6155p qca6698aq_firmware snapdragon_690_5g_mobile_platform sxr2250p wcd9341 qam8775p_firmware sa8255p qca6696_firmware snapdragon_x12_lte_modem qca6797aq wcn3910_firmware snapdragon_855_mobile_platform_firmware sa8150p robotics_rb5_platform sm8250-ac_firmware wsa8830_firmware sd855_firmware sd660 sd865_5g_firmware snapdragon_7c\+_gen_3_compute_firmware wcn3988 sd660_firmware snapdragon_780g_5g_mobile_platform_firmware sa8195p_firmware snapdragon_865_5g_mobile_platform_firmware fastconnect_6800_firmware sa8295p_firmware sa8770p snapdragon_750g_5g_mobile_platform_firmware wcn3610 snapdragon_675_mobile_platform_firmware qca8337_firmware wcd9380_firmware snapdragon_778g_5g_mobile_platform_firmware ssg2125p sw5100p msm8996au_firmware snapdragon_w5\+_gen_1_wearable_platform qcm8550 qca6564au snapdragon_670_mobile_platform_firmware sd670_firmware qca6574 snapdragon_7c\+_gen_3_compute wcd9380 snapdragon_wear_4100\+_platform_firmware fastconnect_6700 qcs410 snapdragon_210_processor sm7150-aa_firmware sxr1230p video_collaboration_vc3_platform_firmware c-v2x_9150_firmware sg8275p qcn9012_firmware qca6430_firmware sm6370_firmware wcd9335_firmware wcn3980 wsa8845 qca6335_firmware qcm4325_firmware wcd9340_firmware wsa8815 sm6150-ac_firmware wcn3910 qca6320 mdm9650_firmware snapdragon_4_gen_1_mobile_platform qcs8250 qca6426_firmware wcn3660b_firmware wcn3680 snapdragon_670_mobile_platform sd835 snapdragon_x62_5g_modem-rf_system_firmware qcn9024 wcn3980_firmware sd730 snapdragon_xr2\+_gen_1_platform_firmware snapdragon_x50_5g_modem-rf_system_firmware sm7150-aa sa8295p snapdragon_820_automotive_platform wcn6740_firmware qcs4490_firmware 215_mobile_platform qca6678aq snapdragon_x65_5g_modem-rf_system snapdragon_xr2_5g_platform ar8031_firmware wcn3680_firmware sa8650p_firmware fastconnect_6900 sm7150-ab_firmware fastconnect_6900_firmware snapdragon_660_mobile_platform qca6797aq_firmware srv1l sd670 qcn9024_firmware qca6564a_firmware sa7255p_firmware snapdragon_8\+_gen_2_mobile_platform qcm4290_firmware sa8620p wsa8832 sw5100p_firmware sa8540p qcs610_firmware qamsrv1m_firmware qcm5430 sa6145p ar8031 qcs4490 qca6595_firmware sa8145p wcd9395 qcs5430_firmware snapdragon_750g_5g_mobile_platform 205_mobile_platform qca6391_firmware snapdragon_710_mobile_platform_firmware sa4150p_firmware wcd9370_firmware sm8550p_firmware sm4350-ac_firmware sdx55 sd888_firmware sa8155p csra6640 snapdragon_695_5g_mobile_platform video_collaboration_vc1_platform srv1m ssg2115p_firmware qam8620p_firmware qam8255p sa4155p snapdragon_720g_mobile_platform_firmware ar8035_firmware qcm2290 snapdragon_855_mobile_platform talynplus_firmware wsa8830 snapdragon_662_mobile_platform_firmware sxr2230p_firmware sa8145p_firmware qcs2290_firmware qam8650p mdm9628_firmware flight_rb5_5g_platform mdm9650 snapdragon_865_5g_mobile_platform csra6620 flight_rb5_5g_platform_firmware sm7250-ac_firmware qcs4290 srv1l_firmware snapdragon_888_5g_mobile_platform_firmware qca6420_firmware sd730_firmware wcd9370 ssg2115p qca6426 qca6584au_firmware wcn3990_firmware qrb5165n_firmware snapdragon_8_gen_2_mobile_platform qca9377 sm8250-ab qamsrv1h sa8530p wcd9385_firmware wcd9326_firmware fastconnect_6200 wcn3615_firmware qamsrv1h_firmware talynplus qam8295p_firmware sm7325-af qcn9011_firmware sa9000p_firmware snapdragon_x55_5g_modem-rf_system qca6320_firmware snapdragon_835_mobile_pc_platform_firmware sdx55_firmware sa7255p snapdragon_4_gen_2_mobile_platform wcn3615 snapdragon_8_gen_3_mobile_platform wsa8845h_firmware wcn3680b_firmware sm7250p_firmware snapdragon_778g_5g_mobile_platform wcn3610_firmware snapdragon_212_mobile_platform_firmware qca6595au sm7325-af_firmware qrb5165n qca6436_firmware sm4350-ac snapdragon_680_4g_mobile_platform_firmware snapdragon_w5\+_gen_1_wearable_platform_firmware qca6564au_firmware qca6584au sa8620p_firmware sa6155p_firmware snapdragon_x65_5g_modem-rf_system_firmware qcm8550_firmware qca6310 sa8775p_firmware qcs6490 snapdragon_439_mobile_platform video_collaboration_vc5_platform qcs8550_firmware sm8250-ac wcn3988_firmware 315_5g_iot_modem srv1h sa6145p_firmware sm6250 sm7250-aa c-v2x_9150 fastconnect_6700_firmware sa8195p sxr1120 wsa8810_firmware vision_intelligence_400_platform wsa8845h snapdragon_x62_5g_modem-rf_system wcd9326 wcd9335 wcd9395_firmware snapdragon_ar2_gen_1_platform_firmware sa8255p_firmware sg4150p qcs7230 qca8081 qcm4490 sa7775p qam8620p qca6174a_firmware qcs5430 qcs4290_firmware sa8770p_firmware sxr2130_firmware wcd9385 qcs6490_firmware snapdragon_x12_lte_modem_firmware sm7150-ab ar8035 wcd9375 aqt1000 snapdragon_210_processor_firmware sm6250_firmware wcd9390 vision_intelligence_400_platform_firmware snapdragon_662_mobile_platform wsa8815_firmware qcm6490 wsa8835_firmware video_collaboration_vc5_platform_firmware sxr1120_firmware sxr2250p_firmware qca6564a sa4150p snapdragon_8_gen_2_mobile_platform_firmware sg4150p_firmware qcm6125_firmware qca6688aq_firmware qcm4325 qcm2290_firmware robotics_rb5_platform_firmware snapdragon_845_mobile_platform qcm2150_firmware wcn3990 sd865_5g fastconnect_6800 qca6595 sm8350-ac_firmware qcs7230_firmware snapdragon_835_mobile_pc_platform qcn9012 sm8150-ac sd888 sa8530p_firmware wsa8835 sxr1230p_firmware msm8996au sa8540p_firmware snapdragon_8\+_gen_2_mobile_platform_firmware snapdragon_auto_5g_modem-rf sd_8_gen1_5g snapdragon_4_gen_1_mobile_platform_firmware snapdragon_4_gen_2_mobile_platform_firmware sxr2130 snapdragon_wear_4100\+_platform smart_audio_400_platform ssg2125p_firmware qca6574a qca6174a sm7325p qca6310_firmware sa8650p sa9000p qca6574_firmware sm7150-ac_firmware sm7250-ab sd855 sm4125_firmware sm7325p_firmware sxr2230p wsa8845_firmware 205_mobile_platform_firmware snapdragon_xr2_5g_platform_firmware snapdragon_439_mobile_platform_firmware qca6574a_firmware sa8775p fastconnect_6200_firmware qrb5165m sm7315 snapdragon_x55_5g_modem-rf_system_firmware sm8250-ab_firmware qca6391 snapdragon_710_mobile_platform fastconnect_7800 aqt1000_firmware qcm4490_firmware snapdragon_690_5g_mobile_platform_firmware snapdragon_845_mobile_platform_firmware qcm4290 qcm6490_firmware wsa8832_firmware snapdragon_xr1_platform srv1h_firmware qcm2150 qcn9011 video_collaboration_vc1_platform_firmware qca6574au sa8155p_firmware qcs8250_firmware wcd9341_firmware fastconnect_7800_firmware qcm6125 sm7250-aa_firmware wsa8810 sm7250-ac sm8550p snapdragon_8_gen_1_mobile_platform_firmware sm8150-ac_firmware snapdragon_680_4g_mobile_platform sm6370 srv1m_firmware snapdragon_ar2_gen_1_platform wcn3680b sm8350-ac sd835_firmware qam8650p_firmware snapdragon_675_mobile_platform wcn6740 qca6696 215_mobile_platform_firmware qcs8550 sm6150-ac snapdragon_x50_5g_modem-rf_system sa6150p snapdragon_8_gen_3_mobile_platform_firmware wcd9390_firmware qcn6024 sm7250p snapdragon_8\+_gen_1_mobile_platform_firmware sw5100_firmware qcs410_firmware snapdragon_xr1_platform_firmware Snapdragon qam8255p_firmware qca9377_firmware talynplus_firmware snapdragon_662_mobile_platform_firmware sa6150p_firmware sa8145p_firmware sxr2230p_firmware 315_5g_iot_modem_firmware qcs2290_firmware sg8275p_firmware mdm9628_firmware snapdragon_820_automotive_platform_firmware flight_rb5_5g_platform_firmware wcn3950_firmware srv1l_firmware snapdragon_888_5g_mobile_platform_firmware sa8150p_firmware qca6420_firmware qca6595au_firmware sd730_firmware csra6620_firmware csra6640_firmware qcm5430_firmware qcs6125_firmware snapdragon_460_mobile_platform_firmware snapdragon_480_5g_mobile_platform_firmware qca6584au_firmware wcn3990_firmware qrb5165n_firmware qualcomm_video_collaboration_vc3_platform_firmware wcd9385_firmware qcn6024_firmware wcd9326_firmware wcn3615_firmware qamsrv1h_firmware sd_8_gen1_5g_firmware qsm8350_firmware snapdragon_660_mobile_platform_firmware qam8295p_firmware qcn9011_firmware sa9000p_firmware qca6320_firmware sm7315_firmware qca6574au_firmware sdx55_firmware snapdragon_695_5g_mobile_platform_firmware snapdragon_212_mobile_platform_firmware snapdragon_835_mobile_pc_platform_firmware qca8081_firmware wcd9375_firmware wcn3680b_firmware sm7250p_firmware wsa8845h_firmware wcn3610_firmware qca6436_firmware snapdragon_680_4g_mobile_platform_firmware qca6564au_firmware sa8620p_firmware sa6155p_firmware snapdragon_auto_5g_modem-rf_firmware snapdragon_x65_5g_modem-rf_system_firmware qcm8550_firmware qca6678aq_firmware smart_audio_400_platform_firmware sa8775p_firmware qrb5165m_firmware wsa8840_firmware sa4155p_firmware robotics_rb3_platform_firmware qcs8550_firmware wcn3988_firmware sa6145p_firmware sa7775p_firmware fastconnect_6700_firmware wsa8810_firmware snapdragon_ar2_gen_1_platform_firmware sa8255p_firmware wcd9395_firmware qca6698aq_firmware qca6174a_firmware qcs4290_firmware qualcomm_205_mobile_platform_firmware sa8770p_firmware qam8775p_firmware sxr2130_firmware qca6696_firmware qcs6490_firmware snapdragon_x12_lte_modem_firmware wcn3910_firmware snapdragon_855_mobile_platform_firmware snapdragon_210_processor_firmware sm6250_firmware vision_intelligence_400_platform_firmware wsa8830_firmware sd855_firmware sd865_5g_firmware wsa8815_firmware wsa8835_firmware sd660_firmware snapdragon_780g_5g_mobile_platform_firmware sa8195p_firmware snapdragon_865_5g_mobile_platform_firmware fastconnect_6800_firmware sxr1120_firmware sa8295p_firmware sxr2250p_firmware sg4150p_firmware snapdragon_8_gen_2_mobile_platform_firmware qca6688aq_firmware qcm6125_firmware snapdragon_675_mobile_platform_firmware qcm2290_firmware snapdragon_750g_5g_mobile_platform_firmware qualcomm_video_collaboration_vc1_platform_firmware robotics_rb5_platform_firmware qca8337_firmware qcm2150_firmware snapdragon_778g_5g_mobile_platform_firmware wcd9380_firmware msm8996au_firmware qcs7230_firmware snapdragon_670_mobile_platform_firmware sa8530p_firmware sd670_firmware sxr1230p_firmware sa8540p_firmware snapdragon_4_gen_1_mobile_platform_firmware snapdragon_4_gen_2_mobile_platform_firmware ssg2125p_firmware c-v2x_9150_firmware qca6310_firmware qca6430_firmware qcn9012_firmware sm6370_firmware wcd9335_firmware qca6335_firmware qcm4325_firmware qca6574_firmware wcd9340_firmware sm4125_firmware sm7325p_firmware wsa8845_firmware mdm9650_firmware snapdragon_xr2_5g_platform_firmware snapdragon_439_mobile_platform_firmware qca6426_firmware wcn3660b_firmware qca6574a_firmware fastconnect_6200_firmware snapdragon_x62_5g_modem-rf_system_firmware wcn3980_firmware snapdragon_x55_5g_modem-rf_system_firmware snapdragon_x50_5g_modem-rf_system_firmware aqt1000_firmware wcn6740_firmware qcm4490_firmware snapdragon_690_5g_mobile_platform_firmware snapdragon_845_mobile_platform_firmware qcs4490_firmware ar8031_firmware qcm6490_firmware wcn3680_firmware sa8650p_firmware wsa8832_firmware fastconnect_6900_firmware srv1h_firmware qca6797aq_firmware sa8155p_firmware qca6564a_firmware qcn9024_firmware sa7255p_firmware qcs8250_firmware wcd9341_firmware fastconnect_7800_firmware qcm4290_firmware sw5100p_firmware qcs610_firmware snapdragon_8_gen_1_mobile_platform_firmware qamsrv1m_firmware srv1m_firmware qualcomm_215_mobile_platform_firmware sd835_firmware qam8650p_firmware qca6595_firmware qcs5430_firmware qca6391_firmware snapdragon_710_mobile_platform_firmware sa4150p_firmware wcd9370_firmware sm8550p_firmware qualcomm_video_collaboration_vc5_platform_firmware sd888_firmware snapdragon_8_gen_3_mobile_platform_firmware wcd9390_firmware ssg2115p_firmware sw5100_firmware qam8620p_firmware qcs410_firmware snapdragon_720g_mobile_platform_firmware ar8035_firmware snapdragon_xr1_platform_firmware

CWE ID-CWE-416

Use After Free

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.19% / 9.02%

||

7 Day CHG~0.00%

Published-30 Sep, 2019 | 15:40

Updated-04 Aug, 2024 | 22:24

Possible use after free issue due to improper input validation in volume listener library in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in MDM9150, MDM9206, MDM9607, MDM9650, MSM8909W, MSM8996AU, QCS405, QCS605, Qualcomm 215, SD 210/SD 212/SD 205, SD 425, SD 427, SD 430, SD 435, SD 439 / SD 429, SD 450, SD 625, SD 632, SD 636, SD 665, SD 675, SD 712 / SD 710 / SD 670, SD 730, SD 820, SD 820A, SD 835, SD 845 / SD 850, SD 855, SDA660, SDM439, SDM630, SDM660, SDX20, SDX24

Vendor-Qualcomm Technologies, Inc.

Product-sd_850 mdm9150_firmware sd_632 sd_820a sd_675 msm8996au_firmware sd_439 sd_670_firmware sd_429 sdx24 sdm439 mdm9650 sd_636 msm8909w_firmware msm8996au sd_820 sd_450_firmware sd_845_firmware sd_820a_firmware qcs605_firmware sd_675_firmware mdm9206 sd_425_firmware sd_665 sdx24_firmware sd_625_firmware sd_450 sd_845 mdm9206_firmware qcs605 sd_632_firmware sd_835_firmware mdm9650_firmware sd_835 sda660 sd_210_firmware msm8909w sd_665_firmware sd_205_firmware sd_212 sd_427_firmware sd_712 sd_855 sd_730_firmware qualcomm_215 sdx20 sd_425 sdm660 sd_430_firmware mdm9607_firmware sd_435 sd_710_firmware sdm630 qcs405 sd_625 sd_820_firmware sd_210 mdm9607 sd_636_firmware sd_439_firmware qualcomm_215_firmware mdm9150 sd_429_firmware sd_730 sd_212_firmware sd_850_firmware sdm439_firmware qcs405_firmware sd_712_firmware sdm630_firmware sda660_firmware sd_430 sd_427 sd_670 sd_435_firmware sdx20_firmware sd_710 sd_205 sdm660_firmware sd_855_firmware Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

CWE ID-CWE-416

Use After Free

CWE ID-CWE-20

Improper Input Validation

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.20% / 9.85%

||

7 Day CHG~0.00%

Published-30 Jul, 2020 | 11:40

Updated-04 Aug, 2024 | 22:24

When kernel thread unregistered listener, Use after free issue happened as the listener client`s private data has been already freed in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in MDM9607, MSM8909W, Nicobar, QCM2150, QCS405, QCS605, Saipan, SC8180X, SDM429W, SDX55, SM8150, SM8250, SXR2130

Vendor-Qualcomm Technologies, Inc.

Product-qcm2150_firmware sm8150_firmware sxr2130_firmware sdm429w qcs405_firmware qcs605_firmware qcm2150 mdm9607_firmware sm8250_firmware qcs605 sc8180x_firmware sdx55 qcs405 saipan_firmware sm8250 msm8909w_firmware mdm9607 sdm429w_firmware sm8150 sdx55_firmware nicobar_firmware msm8909w saipan sxr2130 sc8180x nicobar Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

CWE ID-CWE-416

Use After Free

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-8.4||HIGH

EPSS-0.15% / 5.02%

||

7 Day CHG~0.00%

Published-01 Jul, 2024 | 14:17

Updated-01 Aug, 2024 | 23:06

Use After Free in Graphics

Memory corruption while handling user packets during VBO bind operation.

Vendor-Qualcomm Technologies, Inc.

Product-qam8255p_firmware snapdragon_8_gen_1_mobile_platform talynplus_firmware snapdragon_662_mobile_platform_firmware wsa8830 sxr2230p_firmware qam8650p qam8775p qamsrv1m flight_rb5_5g_platform flight_rb5_5g_platform_firmware wsa8840 wcn3950_firmware srv1l_firmware qca6595au_firmware video_collaboration_vc3_platform snapdragon_480_5g_mobile_platform wcd9370 ssg2115p qcm5430_firmware qcs6125_firmware snapdragon_460_mobile_platform_firmware snapdragon_480_5g_mobile_platform_firmware wcn3990_firmware qrb5165n_firmware snapdragon_8_gen_2_mobile_platform qamsrv1h wcd9385_firmware qam8295p wcn3950 talynplus fastconnect_6200 qamsrv1h_firmware sd_8_gen1_5g_firmware snapdragon_460_mobile_platform qam8295p_firmware sa9000p_firmware qca6320_firmware snapdragon_695_5g_mobile_platform_firmware qca6574au_firmware snapdragon_835_mobile_pc_platform_firmware sa7255p snapdragon_4_gen_2_mobile_platform qca6595au sm6225-ad snapdragon_8_gen_3_mobile_platform wcd9375_firmware wsa8845h_firmware sm4350-ac qrb5165n snapdragon_680_4g_mobile_platform_firmware snapdragon_w5\+_gen_1_wearable_platform_firmware sa8620p_firmware sa6155p_firmware qca6310 qcm8550_firmware qca6678aq_firmware sa8775p_firmware sm6225-ad_firmware qcs6490 wsa8840_firmware qca6698aq qcs6125 video_collaboration_vc5_platform qcs8550_firmware wcn3988_firmware srv1h sa7775p_firmware snapdragon_8\+_gen_1_mobile_platform fastconnect_6700_firmware sa8195p wcd9340 wsa8810_firmware sw5100 wsa8845h snapdragon_ar2_gen_1_platform_firmware sa8255p_firmware sa6155p qcs7230 sg4150p wcd9335 wcd9395_firmware qca6698aq_firmware qcm4490 sa7775p qam8620p qcs5430 sxr2250p sa8770p_firmware wcd9341 qam8775p_firmware sa8255p wcd9385 qca6696_firmware qcs6490_firmware qca6797aq wcd9375 wcd9390 robotics_rb5_platform snapdragon_662_mobile_platform wsa8830_firmware qcm6490 wcn3988 wsa8815_firmware wsa8835_firmware sa8195p_firmware video_collaboration_vc5_platform_firmware sa8295p_firmware sxr2250p_firmware sg4150p_firmware sa8770p snapdragon_8_gen_2_mobile_platform_firmware qcm6125_firmware robotics_rb5_platform_firmware wcd9380_firmware ssg2125p wcn3990 sw5100p snapdragon_w5\+_gen_1_wearable_platform qca6595 qcm8550 qcs7230_firmware snapdragon_835_mobile_pc_platform wsa8835 qca6574 sxr1230p_firmware snapdragon_8\+_gen_2_mobile_platform_firmware sd_8_gen1_5g wcd9380 fastconnect_6700 snapdragon_4_gen_1_mobile_platform_firmware snapdragon_4_gen_2_mobile_platform_firmware ssg2125p_firmware qca6574a sxr1230p video_collaboration_vc3_platform_firmware qca6310_firmware wcd9335_firmware wcn3980 wsa8845 sa8650p sa9000p qca6574_firmware wcd9340_firmware wsa8815 sxr2230p qca6320 wsa8845_firmware snapdragon_4_gen_1_mobile_platform qcs8250 qca6574a_firmware fastconnect_6200_firmware sa8775p sd835 wcn3980_firmware qca6391 sa8295p fastconnect_7800 qcm4490_firmware qcs4490_firmware qca6678aq qcm6490_firmware sa8650p_firmware wsa8832_firmware fastconnect_6900 fastconnect_6900_firmware srv1h_firmware video_collaboration_vc1_platform_firmware qca6797aq_firmware qca6574au sa8155p_firmware srv1l sa7255p_firmware qcs8250_firmware wcd9341_firmware fastconnect_7800_firmware qcm6125 sa8620p snapdragon_8\+_gen_2_mobile_platform wsa8810 wsa8832 sw5100p_firmware sm8550p snapdragon_680_4g_mobile_platform snapdragon_8_gen_1_mobile_platform_firmware qamsrv1m_firmware snapdragon_ar2_gen_1_platform qcm5430 srv1m_firmware sd835_firmware qam8650p_firmware qcs4490 qca6595_firmware wcd9395 qca6696 qcs5430_firmware qca6391_firmware qcs8550 wcd9370_firmware sm8550p_firmware sm4350-ac_firmware snapdragon_8_gen_3_mobile_platform_firmware wcd9390_firmware sa8155p snapdragon_695_5g_mobile_platform video_collaboration_vc1_platform srv1m snapdragon_8\+_gen_1_mobile_platform_firmware ssg2115p_firmware sw5100_firmware qam8620p_firmware qam8255p Snapdragon qam8255p_firmware qualcomm_video_collaboration_vc1_platform_firmware talynplus_firmware snapdragon_662_mobile_platform_firmware robotics_rb5_platform_firmware wcd9380_firmware sxr2230p_firmware qcs7230_firmware flight_rb5_5g_platform_firmware sxr1230p_firmware wcn3950_firmware srv1l_firmware qca6595au_firmware snapdragon_4_gen_1_mobile_platform_firmware snapdragon_4_gen_2_mobile_platform_firmware ssg2125p_firmware qcm5430_firmware qcs6125_firmware snapdragon_460_mobile_platform_firmware snapdragon_480_5g_mobile_platform_firmware wcn3990_firmware qrb5165n_firmware qca6310_firmware wcd9335_firmware qualcomm_video_collaboration_vc3_platform_firmware wcd9385_firmware qamsrv1h_firmware qca6574_firmware sd_8_gen1_5g_firmware wcd9340_firmware wsa8845_firmware qam8295p_firmware sa9000p_firmware qca6320_firmware snapdragon_695_5g_mobile_platform_firmware qca6574au_firmware snapdragon_835_mobile_pc_platform_firmware qca6574a_firmware fastconnect_6200_firmware wcd9375_firmware wsa8845h_firmware wcn3980_firmware snapdragon_680_4g_mobile_platform_firmware sa8620p_firmware sa6155p_firmware qcm8550_firmware qcm4490_firmware qca6678aq_firmware qcs4490_firmware sa8775p_firmware qcm6490_firmware wsa8840_firmware sa8650p_firmware wsa8832_firmware fastconnect_6900_firmware srv1h_firmware qcs8550_firmware wcn3988_firmware qca6797aq_firmware sa8155p_firmware sa7775p_firmware fastconnect_6700_firmware sa7255p_firmware wsa8810_firmware qcs8250_firmware wcd9341_firmware fastconnect_7800_firmware snapdragon_ar2_gen_1_platform_firmware sa8255p_firmware wcd9395_firmware sw5100p_firmware snapdragon_8_gen_1_mobile_platform_firmware qca6698aq_firmware qamsrv1m_firmware srv1m_firmware sd835_firmware qam8650p_firmware sa8770p_firmware qam8775p_firmware qca6696_firmware qcs6490_firmware qca6595_firmware qcs5430_firmware qca6391_firmware wcd9370_firmware sm8550p_firmware qualcomm_video_collaboration_vc5_platform_firmware snapdragon_8_gen_3_mobile_platform_firmware wcd9390_firmware wsa8830_firmware wsa8815_firmware sxr2250p_firmware wsa8835_firmware sa8195p_firmware ssg2115p_firmware sw5100_firmware qam8620p_firmware sa8295p_firmware sg4150p_firmware snapdragon_8_gen_2_mobile_platform_firmware qcm6125_firmware

CWE ID-CWE-416

Use After Free

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.20% / 10.29%

||

7 Day CHG~0.00%

Published-21 Jan, 2020 | 06:30

Updated-04 Aug, 2024 | 22:24

Potential use-after-free heap error during Validate/Present calls on display HW composer in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables in APQ8053, APQ8096AU, APQ8098, MDM9206, MDM9207C, MDM9607, MDM9650, MSM8909W, MSM8917, MSM8920, MSM8937, MSM8940, MSM8953, MSM8996AU, QCS605, SDA660, SDM845, SDX20, SM8150

Vendor-Qualcomm Technologies, Inc.

Product-msm8920 msm8953 msm8996au_firmware apq8098_firmware sdm845 sdx20 msm8920_firmware mdm9607_firmware mdm9650 msm8940_firmware msm8909w_firmware mdm9607 msm8996au msm8917 msm8937 mdm9207c_firmware qcs605_firmware mdm9206 mdm9207c sm8150_firmware apq8096au apq8098 sda660_firmware mdm9206_firmware qcs605 msm8940 apq8053 apq8096au_firmware msm8953_firmware msm8917_firmware msm8937_firmware mdm9650_firmware sm8150 sdx20_firmware sda660 msm8909w apq8053_firmware sdm845_firmware Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables

CWE ID-CWE-416

Use After Free

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.22% / 12.52%

||

7 Day CHG~0.00%

Published-05 Mar, 2020 | 08:56

Updated-04 Aug, 2024 | 22:24

Use after free issue occurs If the real device interface goes down and a route lookup is performed while sending a raw IPv6 message in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in APQ8053, APQ8096AU, APQ8098, MDM9206, MDM9207C, MDM9607, MDM9640, MDM9650, MSM8917, MSM8937, MSM8996AU, QCN7605, SDA845, SDM630, SDM636, SDM660, SDX20, SXR1130

Vendor-Qualcomm Technologies, Inc.

Product-mdm9640_firmware sdm636_firmware msm8996au_firmware apq8098_firmware sdx20 sdm660 sdm630 mdm9607_firmware mdm9650 mdm9607 msm8996au qcn7605_firmware msm8917 msm8937 mdm9207c_firmware mdm9206 mdm9207c apq8096au sdm636 sda845_firmware sdm630_firmware apq8098 qcn7605 mdm9206_firmware apq8053 apq8096au_firmware msm8917_firmware msm8937_firmware mdm9650_firmware sdx20_firmware sxr1130_firmware sxr1130 apq8053_firmware sdm660_firmware sda845 mdm9640 Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

CWE ID-CWE-416

Use After Free

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.21% / 10.78%

||

7 Day CHG+0.01%

Published-16 Apr, 2020 | 10:46

Updated-04 Aug, 2024 | 22:31

Use after free issue when MAP and UNMAP calls at same time as data structure used my MAP may be freed by UNMAP function in Snapdragon Auto, Snapdragon Compute, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music in Nicobar, QCS405, Rennell, Saipan, SC8180X, SDX55, SM6150, SM7150, SM8150, SM8250, SXR2130

Vendor-Qualcomm Technologies, Inc.

Product-sm8150_firmware sxr2130_firmware qcs405_firmware rennell rennell_firmware sm8250_firmware sc8180x_firmware sdx55 qcs405 sm7150_firmware saipan_firmware sm6150_firmware sm6150 sm8250 sm8150 sdx55_firmware sm7150 nicobar_firmware saipan sxr2130 sc8180x nicobar Snapdragon Auto, Snapdragon Compute, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music

CWE ID-CWE-416

Use After Free

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-8.4||HIGH

EPSS-0.11% / 1.58%

||

7 Day CHG~0.00%

Published-01 Apr, 2024 | 15:06

Updated-13 Jan, 2025 | 21:54

Use After Free in Kernel

Memory corruption in Kernel while handling GPU operations.

Vendor-Qualcomm Technologies, Inc.

Product-sa8770p_firmware snapdragon_685_4g_mobile_firmware wsa8840_firmware qam8255p_firmware qca6797aq_firmware fastconnect_7800_firmware sa8155p qam8255p qca6595au_firmware snapdragon_auto_5g_modem-rf_gen_2 sg8275p_firmware wsa8845_firmware qam8650p_firmware qca6574_firmware snapdragon_8_gen_1_mobile sa8255p_firmware qca6595au snapdragon_auto_5g_modem-rf_gen_2_firmware wcd9390 wsa8835 snapdragon_680_4g_mobile wcn3950 fastconnect_7800 wsa8845h_firmware wcd9395_firmware wsa8830 sa8295p_firmware qca6696 qcm4325 sa8295p qca6584au_firmware fastconnect_6900 qca6574au_firmware snapdragon_685_4g_mobile wsa8845 snapdragon_680_4g_mobile_firmware qcm4325_firmware qca6584au qca6595 sa8155p_firmware wsa8835_firmware qca6595_firmware sa8255p wcd9390_firmware qca6574a qca6797aq wsa8845h qam8775p_firmware wcd9385_firmware fastconnect_6900_firmware qam8295p_firmware wcd9380 wcn3950_firmware wcd9385 wcd9395 qam8650p sa8770p sa8195p_firmware qca6574a_firmware qca6574 qca6696_firmware sa8775p sa6155p wsa8830_firmware sa9000p_firmware qca6698aq sa6155p_firmware qam8775p qam8295p wcd9380_firmware sa9000p snapdragon_8_gen_1_mobile_firmware sa8775p_firmware qca6698aq_firmware wsa8840 sg8275p qca6574au sa8195p Snapdragon qam8255p_firmware sa6155p_firmware wcd9380_firmware sa8775p_firmware wsa8840_firmware sg8275p_firmware fastconnect_6900_firmware qca6797aq_firmware sa8155p_firmware wcn3950_firmware fastconnect_7800_firmware qca6595au_firmware wcd9395_firmware sa8255p_firmware snapdragon_8_gen_1_mobile_platform_firmware qca6698aq_firmware qam8650p_firmware sa8770p_firmware snapdragon_auto_5g_modem-rf_gen_2_firmware qam8775p_firmware qca6584au_firmware qca6696_firmware qca6595_firmware wcd9385_firmware qcm4325_firmware qca6574_firmware wcd9390_firmware wsa8830_firmware wsa8845_firmware qam8295p_firmware sa9000p_firmware qca6574a_firmware wsa8835_firmware qca6574au_firmware sa8195p_firmware wsa8845h_firmware sa8295p_firmware snapdragon_680_4g_mobile_platform_firmware

CWE ID-CWE-416

Use After Free

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-8.4||HIGH

EPSS-0.11% / 1.59%

||

7 Day CHG~0.00%

Published-01 Apr, 2024 | 15:06

Updated-11 Aug, 2025 | 15:06

Use After Free in Kernel

Memory corruption when there is failed unmap operation in GPU.

Vendor-Qualcomm Technologies, Inc.

Product-snapdragon_wear_3100_firmware sdm429w_firmware snapdragon_x20_lte_modem robotics_rb3 sd865_5g apq8017 qcs8155_firmware qcs410_firmware snapdragon_632_mobile sa6150p_firmware sw5100p qca6595 sxr1120 qcs610_firmware wcd9335 wcd9370 qca8081_firmware snapdragon_670_mobile qca6696 wcd9340_firmware wcd9341_firmware qcn6024 qca6426 wcn6740_firmware fastconnect_6700 wcn3610 snapdragon_780g_5g_mobile snapdragon_750g_5g_mobile vision_intelligence_200_firmware snapdragon_685_4g_mobile sa4150p snapdragon_782g_mobile_firmware snapdragon_x50_5g_modem-rf_firmware snapdragon_wear_4100\+_firmware qca8337 qca6426_firmware snapdragon_auto_4g_modem snapdragon_665_mobile_firmware qca6574au_firmware snapdragon_690_5g_mobile_firmware qca6564_firmware sm6370 qam8295p wcd9341 sd626_firmware qca6574au snapdragon_820_automotive 205_mobile snapdragon_888\+_5g_mobile_firmware snapdragon_x12_lte_modem wsa8810_firmware sd730_firmware csra6640 snapdragon_212_mobile msm8209_firmware snapdragon_778g_5g_mobile_firmware wcn3660b_firmware sd730 snapdragon_820_automotive_firmware fastconnect_6800_firmware qcs5430 snapdragon_690_5g_mobile sd835_firmware qcn6024_firmware sdx20m snapdragon_636_mobile_firmware qcm5430 qcm5430_firmware video_collaboration_vc1_platform_firmware sa4155p snapdragon_625_mobile snapdragon_210_processor_firmware qcm6125_firmware c-v2x_9150 snapdragon_678_mobile_firmware snapdragon_425_mobile sd821 snapdragon_xr2_5g_firmware snapdragon_632_mobile_firmware msm8108 snapdragon_xr1_firmware sxr1120_firmware qsm8250_firmware snapdragon_x5_lte_modem_firmware qsm8350_firmware snapdragon_wear_4100\+315_5g_iot_modem_firmware fastconnect_6900 snapdragon_w5\+_gen_1_wearable_firmware video_collaboration_vc1_platform snapdragon_730_mobile_firmware wcd9385_firmware qca6421 vision_intelligence_200 315_5g_iot_modem qca6310 sa8155_firmware wcd9360 qca6335 snapdragon_x65_5g_modem-rf snapdragon_730_mobile sd821_firmware snapdragon_wear_3100 mdm9250 snapdragon_680_4g_mobile snapdragon_626_mobile_firmware sa6155p qca6421_firmware qcm6125 snapdragon_212_mobile_firmware qca6564au_firmware sd820 snapdragon_429_mobile_firmware wsa8810 video_collaboration_vc5_platform_firmware snapdragon_835_mobile qsm8250 snapdragon_888_5g_mobile_firmware qca6595au snapdragon_888_5g_mobile sm7315_firmware snapdragon_wear_2500 snapdragon_662_mobile_firmware sa6155p_firmware snapdragon_685_4g_mobile_firmware wcd9326_firmware mdm9640_firmware snapdragon_845_mobile_firmware snapdragon_730g_mobile snapdragon_782g_mobile sd835 snapdragon_x55_5g_modem-rf qca6436_firmware qcn9012 mdm9650_firmware snapdragon_695_5g_mobile_firmware wcd9371_firmware snapdragon_x55_5g_modem-rf_firmware snapdragon_7c\+_gen_3_compute_firmware wcn3910_firmware sm4125_firmware snapdragon_460_mobile qca6420 qca6174_firmware wcn3910 apq8064au_firmware wcd9370_firmware csrb31024 qca9367 mdm9250_firmware snapdragon_835_mobile_firmware wcn3660b qca6574a wcn3620_firmware qca6174a qca6584_firmware sa8195p wcd9340 qcs8250_firmware qcm2290 snapdragon_1200_wearable_firmware snapdragon_auto_5g_modem-rf_gen_2 qca6335_firmware qcm6490 snapdragon_x20_lte_modem_firmware wcn3988 snapdragon_765_5g_mobile_firmware sm6370_firmware snapdragon_662_mobile qcn9024 vision_intelligence_300_firmware qca9379 qca6574 215_mobile sd675_firmware snapdragon_855_mobile_firmware qca6430_firmware qcn9011 smart_audio_400 qcn9024_firmware sa6150p wcd9326 qcs410 qcm2290_firmware vision_intelligence_100 sa8155p_firmware snapdragon_630_mobile sa8155p home_hub_100 snapdragon_765g_5g_mobile_firmware snapdragon_wear_2100_firmware smart_display_200_firmware wsa8830 qca6564a sa6145p snapdragon_wear_2100 qcn9074_firmware snapdragon_768g_5g_mobile_firmware snapdragon_625_mobile_firmware ar8035 msm8996au qca6564 sa6155 qrb5165m_firmware snapdragon_820_mobile_firmware wcn3620 snapdragon_208_processor_firmware snapdragon_865\+_5g_mobile_firmware snapdragon_x5_lte_modem snapdragon_429_mobile apq8064au qca6698aq wcn3950_firmware sm6250 qrb5165n snapdragon_480\+_5g_mobile fastconnect_6200 sd670 wcn3680b sm7325p_firmware sa8145p_firmware wcd9360_firmware snapdragon_480_5g_mobile_firmware snapdragon_660_mobile_firmware qcs8155 sa8150p_firmware fastconnect_6700_firmware snapdragon_710_mobile_firmware video_collaboration_vc3_platform_firmware wcn3990 robotics_rb3_firmware sd670_firmware snapdragon_855_mobile qcs6490 qcs8250 snapdragon_695_5g_mobile snapdragon_778g_5g_mobile fastconnect_6200_firmware ar8031_firmware home_hub_100_firmware snapdragon_460_mobile_firmware wsa8830_firmware vision_intelligence_100_firmware qca6431 sd660_firmware wcd9385 snapdragon_auto_4g_modem_firmware snapdragon_480_5g_mobile snapdragon_750g_5g_mobile_firmware qca9379_firmware sxr2130_firmware snapdragon_860_mobile_firmware ar8035_firmware 205_mobile_firmware snapdragon_778g\+_5g_mobile qrb5165m qca6320 sa4150p_firmware msm8608_firmware sd888_firmware msm8209 qca6564au qcs6125_firmware snapdragon_820_mobile snapdragon_425_mobile_firmware qcn9074 wsa8815_firmware sa8195p_firmware qca8337_firmware snapdragon_x12_lte_modem_firmware qcm4290 msm8608 ar8031 snapdragon_xr2\+_gen_1 qca9377_firmware qcm6490_firmware snapdragon_665_mobile sm7250p_firmware wcn3680_firmware sm4125 vision_intelligence_400_firmware wcn3950 qcs6125 flight_rb5_5g snapdragon_870_5g_mobile_firmware snapdragon_730g_mobile_firmware snapdragon_auto_5g_modem-rf_gen_2_firmware snapdragon_7c\+_gen_3_compute snapdragon_732g_mobile snapdragon_778g\+_5g_mobile_firmware sa8295p_firmware smart_audio_400_firmware sd_675_firmware snapdragon_870_5g_mobile smart_audio_200_firmware sa4155p_firmware snapdragon_720g_mobile snapdragon_678_mobile sm7250p csrb31024_firmware sa8155 sm6250_firmware qca6584au sd888 qca6320_firmware qcn9011_firmware snapdragon_675_mobile_firmware snapdragon_wear_2500_firmware sw5100_firmware wcn6740 snapdragon_768g_5g_mobile snapdragon_780g_5g_mobile_firmware qca6310_firmware snapdragon_845_mobile sd626 fastconnect_6800 qca6595_firmware fastconnect_7800_firmware snapdragon_675_mobile snapdragon_865_5g_mobile_firmware wcd9371 fastconnect_6900_firmware robotics_rb5_firmware apq8017_firmware wcd9380 sa6145p_firmware sa6155_firmware smart_audio_200 snapdragon_xr2_5g sa8150p snapdragon_x24_lte_modem msm8996au_firmware snapdragon_1200_wearable snapdragon_auto_5g_modem-rf_firmware sw5100 video_collaboration_vc3_platform aqt1000 snapdragon_4_gen_1_mobile_firmware 215_mobile_firmware c-v2x_9150_firmware qam8295p_firmware sd855 qca6431_firmware wcd9330_firmware qca6174 wcn3990_firmware sm7315 snapdragon_660_mobile qca6698aq_firmware qcs2290 sdx20m_firmware qca6564a_firmware snapdragon_888\+_5g_mobile qcs2290_firmware qsm8350 snapdragon_xr2\+_gen_1_firmware wcn3615 qca9367_firmware msm8909w_firmware snapdragon_8_gen_1_mobile snapdragon_630_mobile_firmware wcd9330 wcn3680 snapdragon_680_4g_mobile_firmware wcn3610_firmware qcs4290 snapdragon_821_mobile snapdragon_865\+_5g_mobile sd820_firmware qca6430 snapdragon_855\+_mobile mdm9650 snapdragon_765_5g_mobile snapdragon_860_mobile sdx55_firmware snapdragon_auto_5g_modem-rf snapdragon_208_processor wcn3615_firmware flight_rb5_5g_firmware snapdragon_210_processor sxr2130 9206_lte_modem_firmware msm8108_firmware snapdragon_x65_5g_modem-rf_firmware csra6640_firmware snapdragon_480\+_5g_mobile_firmware robotics_rb5 qca6174a_firmware sm7325p snapdragon_732g_mobile_firmware snapdragon_x50_5g_modem-rf video_collaboration_vc5_platform snapdragon_670_mobile_firmware qca6420_firmware aqt1000_firmware qcs6490_firmware sdm429w sd855_firmware wcd9335_firmware mdm9640 qca6436 qrb5165n_firmware wcn3980_firmware snapdragon_x24_lte_modem_firmware wsa8835 qca6391_firmware qca6584au_firmware qca6595au_firmware qcs610 sw5100p_firmware qca6696_firmware qcs4290_firmware wcd9380_firmware qca6574_firmware csra6620 qca8081 sd660 mdm9628 wsa8815 qca9377 mdm9628_firmware snapdragon_439_mobile_firmware 9206_lte_modem qca6574a_firmware sdx55 snapdragon_4_gen_1_mobile qcm4290_firmware snapdragon_720g_mobile_firmware snapdragon_865_5g_mobile snapdragon_855\+_mobile_firmware sd675 snapdragon_821_mobile_firmware wcd9375_firmware qca6391 snapdragon_710_mobile qcn9012_firmware qcs5430_firmware snapdragon_439_mobile qca6584 csra6620_firmware sa8295p fastconnect_7800 snapdragon_626_mobile sd865_5g_firmware snapdragon_xr1 wcd9375 vision_intelligence_300 snapdragon_765g_5g_mobile wcn3988_firmware snapdragon_636_mobile sa8145p sd_675 vision_intelligence_400 wsa8835_firmware smart_display_200 wcn3980 msm8909w wcn3680b_firmware snapdragon_w5\+_gen_1_wearable snapdragon_8_gen_1_mobile_firmware Snapdragon qca9377_firmware snapdragon_662_mobile_platform_firmware mdm9640_firmware sa6150p_firmware sa8145p_firmware 315_5g_iot_modem_firmware qcs2290_firmware snapdragon_x24_lte_modem_firmware qca6431_firmware mdm9628_firmware snapdragon_820_automotive_platform_firmware wcd9360_firmware flight_rb5_5g_platform_firmware snapdragon_wear_2100_platform_firmware snapdragon_x20_lte_modem_firmware wcn3950_firmware snapdragon_888_5g_mobile_platform_firmware sa8150p_firmware qca6420_firmware qca6595au_firmware snapdragon_xr1_platform_firmware qca6174_firmware sd730_firmware snapdragon_auto_4g_modem_firmware csra6620_firmware sd_675_firmware sd675_firmware csra6640_firmware qcm5430_firmware qcs6125_firmware snapdragon_460_mobile_platform_firmware snapdragon_480_5g_mobile_platform_firmware qca6584au_firmware wcn3990_firmware qrb5165n_firmware qualcomm_video_collaboration_vc3_platform_firmware msm8108_firmware wcd9371_firmware wcd9385_firmware qcn6024_firmware wcd9326_firmware wcn3615_firmware snapdragon_1200_wearable_platform_firmware qsm8350_firmware snapdragon_660_mobile_platform_firmware qam8295p_firmware qcn9011_firmware sm7315_firmware qca6320_firmware snapdragon_429_mobile_platform_firmware qca6574au_firmware sdx55_firmware snapdragon_208_processor_firmware snapdragon_212_mobile_platform_firmware snapdragon_695_5g_mobile_platform_firmware qca8081_firmware sa6155_firmware snapdragon_835_mobile_pc_platform_firmware sm7250p_firmware wcd9375_firmware wcn3610_firmware qca6436_firmware snapdragon_680_4g_mobile_platform_firmware qca6564au_firmware snapdragon_auto_5g_modem-rf_firmware sa6155p_firmware qca9367_firmware snapdragon_x65_5g_modem-rf_system_firmware snapdragon_821_mobile_platform_firmware smart_audio_400_platform_firmware snapdragon_x5_lte_modem_firmware qrb5165m_firmware sa4155p_firmware sa8155_firmware robotics_rb3_platform_firmware vision_intelligence_300_platform_firmware wcn3988_firmware sa6145p_firmware fastconnect_6700_firmware apq8017_firmware sd626_firmware snapdragon_626_mobile_platform_firmware wsa8810_firmware home_hub_100_platform_firmware qca6698aq_firmware msm8209_firmware qca6174a_firmware mdm9250_firmware qcs4290_firmware qualcomm_205_mobile_platform_firmware snapdragon_auto_5g_modem-rf_gen_2_firmware sxr2130_firmware qca6696_firmware qcs6490_firmware snapdragon_x12_lte_modem_firmware snapdragon_665_mobile_platform_firmware wcn3910_firmware snapdragon_855_mobile_platform_firmware snapdragon_210_processor_firmware sm6250_firmware vision_intelligence_400_platform_firmware wsa8830_firmware sd855_firmware sd865_5g_firmware wcn3620_firmware wsa8815_firmware wsa8835_firmware sd660_firmware snapdragon_636_mobile_platform_firmware snapdragon_780g_5g_mobile_platform_firmware sa8195p_firmware snapdragon_865_5g_mobile_platform_firmware fastconnect_6800_firmware sxr1120_firmware sa8295p_firmware snapdragon_750g_5g_mobile_platform_firmware qcm6125_firmware snapdragon_675_mobile_platform_firmware qcm2290_firmware qualcomm_video_collaboration_vc1_platform_firmware robotics_rb5_platform_firmware qca8337_firmware wcd9380_firmware snapdragon_778g_5g_mobile_platform_firmware msm8996au_firmware snapdragon_670_mobile_platform_firmware msm8909w_firmware sd670_firmware sdm429w_firmware snapdragon_4_gen_1_mobile_platform_firmware snapdragon_425_mobile_platform_firmware qca9379_firmware c-v2x_9150_firmware qca6310_firmware qca6430_firmware qcn9012_firmware sm6370_firmware wcd9335_firmware qca6335_firmware qca6574_firmware wcd9340_firmware sm4125_firmware wcn3680b_firmware sm7325p_firmware qca6584_firmware mdm9650_firmware snapdragon_630_mobile_platform_firmware snapdragon_439_mobile_platform_firmware qca6426_firmware snapdragon_xr2_5g_platform_firmware wcn3660b_firmware qca6574a_firmware fastconnect_6200_firmware wcn3980_firmware snapdragon_x55_5g_modem-rf_system_firmware wcd9330_firmware snapdragon_x50_5g_modem-rf_system_firmware qca6421_firmware aqt1000_firmware wcn6740_firmware sd821_firmware snapdragon_690_5g_mobile_platform_firmware snapdragon_845_mobile_platform_firmware snapdragon_632_mobile_platform_firmware apq8064au_firmware ar8031_firmware csrb31024_firmware qcm6490_firmware wcn3680_firmware fastconnect_6900_firmware 9206_lte_modem_firmware sa8155p_firmware smart_audio_200_platform_firmware qca6564a_firmware qcn9024_firmware qcs8250_firmware wcd9341_firmware fastconnect_7800_firmware qcm4290_firmware sdx20m_firmware sw5100p_firmware qcs610_firmware snapdragon_8_gen_1_mobile_platform_firmware qualcomm_215_mobile_platform_firmware sd835_firmware qca6564_firmware snapdragon_wear_2500_platform_firmware qca6595_firmware qcs5430_firmware sd820_firmware qca6391_firmware snapdragon_710_mobile_platform_firmware sa4150p_firmware msm8608_firmware wcd9370_firmware qualcomm_video_collaboration_vc5_platform_firmware sd888_firmware snapdragon_820_mobile_platform_firmware snapdragon_wear_3100_platform_firmware qcs8155_firmware qcn9074_firmware qcs410_firmware sw5100_firmware snapdragon_720g_mobile_platform_firmware ar8035_firmware qsm8250_firmware snapdragon_625_mobile_platform_firmware

CWE ID-CWE-416

Use After Free

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.19% / 9.19%

||

7 Day CHG~0.00%

Published-06 Jul, 2018 | 17:00

Updated-17 Sep, 2024 | 03:48

In the KGSL driver in Android releases from CAF using the linux kernel (Android for MSM, Firefox OS for MSM, QRD Android) before security patch level 2018-06-05, a reference counting error can lead to a Use After Free condition.

Vendor-Qualcomm Technologies, Inc.Google LLC

Product-android Android for MSM, Firefox OS for MSM, QRD Android

CWE ID-CWE-416

Use After Free

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.07% / 0.06%

||

7 Day CHG~0.00%

Published-02 Mar, 2026 | 16:53

Updated-04 Mar, 2026 | 16:30

Use After Free in Automotive Audio

Memory Corruption when accessing a buffer after it has been freed while processing IOCTL calls.

Vendor-Qualcomm Technologies, Inc.

Product-video_collaboration_vc5_platform wcn6650 qcm4325_firmware wcd9390 snapdragon_8_gen_2_mobile_platform_firmware wcd9395_firmware qamsrv1h_firmware fastconnect_6200_firmware wsa8810 qamsrv1h qca8081_firmware robotics_rb5_platform_firmware sa8195p sm7550p_firmware qcn6224_firmware qamsrv1m_firmware snapdragon_x72_5g_modem-rf_system_firmware wcn3980_firmware snapdragon_x32_5g_modem-rf_system_firmware qcm6125_firmware sm7635p qcm4325 sm8550p_firmware sa9000p_firmware sm8650q qcs4290 qep8111_firmware qca6678aq_firmware snapdragon_x32_5g_modem-rf_system sxr2330p fastconnect_6900 sm8635p sw5100p wcd9390_firmware qca8337 snapdragon_6_gen_4_mobile_platform snapdragon_8_gen_2_mobile_platform lemansau_firmware snapdragon_460_mobile_platform_firmware qcm2290 snapdragon_680_4g_mobile_platform sa8770p_firmware sa8620p sd662_firmware qca8337_firmware sm7675p snapdragon_4_gen_1_mobile_platform_firmware sxr2350p_firmware sm6225p_firmware sa6155p_firmware snapdragon_480\+_5g_mobile_platform sm6650p qcn6224 qrb5165n sm7675 sa7255p flight_rb5_5g_platform video_collaboration_vc1_platform qam8255p qcn6274 wcn3910 snapdragon_480_5g_mobile_platform sm6225p snapdragon_x35_5g_modem-rf_system snapdragon_x72_5g_modem-rf_system sa7255p_firmware sm7550 srv1m_firmware qca6688aq_firmware sa8255p_firmware wsa8810_firmware qfw7124 qcs2290_firmware sw5100 srv1h_firmware flight_rb5_5g_platform_firmware sxr2350p sa6155p snapdragon_685_4g_mobile_platform snapdragon_4_gen_1_mobile_platform qcs2290 wcd9378 qca6584au sa8295p qcm6125 sa8295p_firmware qfw7124_firmware qca6391 qam8295p qca8695au_firmware milos wcn3988 qfw7114_firmware snapdragon_480\+_5g_mobile_platform_firmware sa9000p wcd9371 wcd9378_firmware wcn3950 fastconnect_6900_firmware qca6174a qca6584au_firmware qca6574 qca6595 qca6574au qca6678aq qca9377 snapdragon_x75_5g_modem-rf_system srv1h wcn6450_firmware wsa8830_firmware wcd9370_firmware snapdragon_685_4g_mobile_platform_firmware qamsrv1m qcs8550_firmware qcn9012_firmware snapdragon_662_mobile_platform_firmware qcc710_firmware qcm2290_firmware wcn6755 wcn3910_firmware qca6698au_firmware qfw7114 g1_gen_1_firmware qep8111 qca6595au qca6574a snapdragon_auto_5g_modem-rf_gen_2_firmware fwa_gen_3_ultra_firmware snapdragon_x35_5g_modem-rf_system_firmware snapdragon_480_5g_mobile_platform_firmware qca8081 qcn9011 sa8155p qca6698au wsa8845h_firmware fastconnect_6200 qca6595_firmware lemans_au_lgit_firmware wsa8835_firmware qca6696_firmware qca9377_firmware qca6174a_firmware sa8620p_firmware sm7550p qca6595au_firmware qca6797aq_firmware qca6574a_firmware sa7775p sa8155p_firmware sm8550p qca9367 qam8295p_firmware qcn6274_firmware qca6574au_firmware snapdragon_x75_5g_modem-rf_system_firmware snapdragon_6_gen_4_mobile_platform_firmware qcn9012 qca6696 sw5100_firmware sxr2330p_firmware sa8770p ar8035 sm8635 qrb5165n_firmware qca6574_firmware wcd9395 snapdragon_8\+_gen_2_mobile_platform_firmware wcd9370 wcn6650_firmware qcs8550 wcd9340_firmware srv1m sm8650q_firmware qcc710 qcs4290_firmware qca6688aq wcd9380 wcd9380_firmware milos_firmware qca6698aq_firmware sm7635p_firmware fastconnect_7800_firmware wcd9371_firmware wsa8815 snapdragon_7s_gen_3_mobile_platform wcd9375 sm7675p_firmware snapdragon_460_mobile_platform qcn9011_firmware qca6698aq fastconnect_7800 snapdragon_w5\+_gen_1_wearable_platform sw5100p_firmware wsa8845 wsa8845_firmware snapdragon_680_4g_mobile_platform_firmware qam8255p_firmware wsa8835 snapdragon_695_5g_mobile_platform sa8255p robotics_rb5_platform qca9367_firmware wsa8840_firmware wcd9375_firmware wcd9385_firmware wcn6755_firmware wsa8830 fwa_gen_3_ultra snapdragon_8_gen_3_mobile_platform_firmware ar8035_firmware snapdragon_662_mobile_platform wcn3950_firmware wcd9340 wsa8845h video_collaboration_vc5_platform_firmware snapdragon_auto_5g_modem-rf_gen_2 wsa8832_firmware sm7675_firmware sm8635p_firmware snapdragon_7s_gen_3_mobile_platform_firmware sm6650p_firmware qca8695au wcn3988_firmware video_collaboration_vc1_platform_firmware sd662 g1_gen_1 wsa8840 wsa8815_firmware wcd9385 wcn3980 wsa8832 sa8195p_firmware sm7550_firmware snapdragon_8_gen_3_mobile_platform sa7775p_firmware snapdragon_695_5g_mobile_platform_firmware snapdragon_w5\+_gen_1_wearable_platform_firmware snapdragon_8\+_gen_2_mobile_platform lemansau lemans_au_lgit qca6391_firmware sm8635_firmware qca6797aq wcn6450 Snapdragon

CWE ID-CWE-416

Use After Free

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-6.6||MEDIUM

EPSS-0.09% / 0.69%

||

7 Day CHG~0.00%

Published-06 May, 2025 | 08:32

Updated-26 Feb, 2026 | 18:28

Use After Free in Secure Processor

Memory corruption while handling multiple IOCTL calls from userspace to operate DMA operations.

Vendor-Qualcomm Technologies, Inc.

Product-snapdragon_8_gen_3_mobile snapdragon_8_gen_3_mobile_firmware wcd9390_firmware fastconnect_7800_firmware wcd9395 wsa8840 wsa8845h wsa8845_firmware wsa8840_firmware wsa8845 wcd9395_firmware wsa8845h_firmware wcd9390 fastconnect_7800 Snapdragon

CWE ID-CWE-416

Use After Free

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-6.7||MEDIUM

EPSS-0.14% / 3.72%

||

7 Day CHG~0.00%

Published-05 Dec, 2023 | 03:03

Updated-25 Feb, 2026 | 16:51

Use After Free in Audio

Memory Corruption in Audio while invoking IOCTLs calls from the user-space.

Vendor-Qualcomm Technologies, Inc.

Product-snapdragon_855\+\/860_mobile_platform_firmware qam8255p_firmware wsa8830 qca8337_firmware wcd9380_firmware sw5100p qca8337 sd865_5g qfw7124 fastconnect_6800 snapdragon_w5\+_gen_1_wearable_platform qam8775p snapdragon_870_5g_mobile_platform_firmware ar8035_firmware snapdragon_865_5g_mobile_platform qualcomm_215_mobile_platform qualcomm_205_mobile_platform qcn6224_firmware wsa8835 snapdragon_212_mobile_platform qcn6274 wcd9380 qca6420_firmware snapdragon_wear_4100\+_platform_firmware snapdragon_210_processor snapdragon_855\+\/860_mobile_platform sxr2130 snapdragon_wear_4100\+_platform qca6426 qca6584au_firmware qca6430_firmware wcn3980 qfw7114_firmware fastconnect_6200 sa9000p wcd9340_firmware sd855 wsa8815 snapdragon_865\+_5g_mobile_platform snapdragon_xr2_5g_platform_firmware qca6426_firmware sa9000p_firmware snapdragon_x55_5g_modem-rf_system sa8775p fastconnect_6200_firmware snapdragon_212_mobile_platform_firmware qca8081_firmware wcn3980_firmware qfw7114 snapdragon_x55_5g_modem-rf_system_firmware qca6391 wcn3610_firmware qca6420 qca6436_firmware snapdragon_w5\+_gen_1_wearable_platform_firmware fastconnect_7800 aqt1000_firmware qca6584au snapdragon_865\+_5g_mobile_platform_firmware snapdragon_870_5g_mobile_platform qcn6274_firmware snapdragon_xr2_5g_platform sa8775p_firmware qca6698aq fastconnect_6900 snapdragon_x75_5g_modem-rf_system_firmware fastconnect_6900_firmware wcn3988_firmware qca6430 wcd9340 wsa8810_firmware qcn6224 wcd9341_firmware fastconnect_7800_firmware sw5100 wsa8810 qca6436 sa8255p_firmware snapdragon_x75_5g_modem-rf_system sw5100p_firmware qca8081 qca6698aq_firmware snapdragon_auto_5g_modem-rf_gen_2 qualcomm_215_mobile_platform_firmware qualcomm_205_mobile_platform_firmware sa8770p_firmware snapdragon_auto_5g_modem-rf_gen_2_firmware qam8775p_firmware sa8255p sxr2130_firmware wcd9341 qcc710 qca6391_firmware ar8035 snapdragon_855_mobile_platform_firmware aqt1000 snapdragon_210_processor_firmware snapdragon_855_mobile_platform qcc710_firmware wsa8830_firmware sd855_firmware sd865_5g_firmware wcn3988 wsa8815_firmware wsa8835_firmware snapdragon_865_5g_mobile_platform_firmware sw5100_firmware fastconnect_6800_firmware qfw7124_firmware qam8255p sa8770p wcn3610 Snapdragon

CWE ID-CWE-416

Use After Free

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-8.4||HIGH

EPSS-0.12% / 1.88%

||

7 Day CHG~0.00%

Published-04 Jul, 2023 | 04:46

Updated-02 Aug, 2024 | 09:44

Use After Free in Audio

Memory corruption in Audio while running concurrent tunnel playback or during concurrent audio tunnel recording sessions.

Vendor-Qualcomm Technologies, Inc.

Product-qam8255p_firmware wsa8830 wcd9380_firmware sa6150p_firmware ssg2125p sa8145p_firmware sxr2230p_firmware sw5100p qam8650p sd865_5g qca6595 snapdragon_8_gen_1_firmware qam8775p snapdragon_ar2_gen_1 snapdragon_685_4g_firmware wsa8835 qca6574 sxr1230p_firmware wcn3950_firmware snapdragon_8_gen_1 sd_8_gen1_5g wcd9380 sa8150p_firmware qca6595au_firmware fastconnect_6700 wcd9370 ssg2125p_firmware qca6574a ssg2115p sxr1230p wcn3980 snapdragon_8\+_gen_1 wcd9385_firmware qam8295p wcn3950 qcm4325_firmware qca6574_firmware sd_8_gen1_5g_firmware snapdragon_680_4g_firmware wsa8815 sxr2230p qam8295p_firmware snapdragon_4_gen_2 qca6574a_firmware qca6574au_firmware qca6595au wcd9375_firmware wcn3980_firmware snapdragon_w5\+_gen_1_firmware snapdragon_xr2_5g sa8295p snapdragon_w5\+_gen_1 fastconnect_7800 wcn6740_firmware sa6155p_firmware snapdragon_685_4g snapdragon_ar2_gen_1_firmware snapdragon_4_gen_2_firmware wsa8832_firmware qca6698aq sa4155p_firmware fastconnect_6900 fastconnect_6900_firmware sa4150p wcn3988_firmware qca6797aq_firmware qca6574au sa6145p_firmware sa8155p_firmware snapdragon_680_4g fastconnect_6700_firmware sa8195p wsa8810_firmware snapdragon_8\+_gen_1_firmware fastconnect_7800_firmware sw5100 wsa8810 wsa8832 sa8255p_firmware sa6155p sg4150p sw5100p_firmware qca6698aq_firmware sa6145p qam8650p_firmware wcd9385 qam8775p_firmware sa8255p qca6696_firmware qca6595_firmware sa8145p wcn6740 qca6696 qca6797aq snapdragon_xr2_5g_firmware sa4150p_firmware wcd9375 wcd9370_firmware sa8150p sa6150p sa8155p wsa8830_firmware sd865_5g_firmware wcn3988 wsa8815_firmware wsa8835_firmware sa8195p_firmware ssg2115p_firmware sw5100_firmware sa8295p_firmware qam8255p sa4155p sg4150p_firmware qcm4325 Snapdragon

CWE ID-CWE-416

Use After Free

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.11% / 1.53%

||

7 Day CHG~0.00%

Published-03 Mar, 2025 | 10:07

Updated-03 Mar, 2025 | 12:27

Use After Free in Camera Linux

Memory corruption caused by missing locks and checks on the DMA fence and improper synchronization.

Vendor-Qualcomm Technologies, Inc.

Product-Snapdragon

CWE ID-CWE-416

Use After Free

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.21% / 11.40%

||

7 Day CHG~0.00%

Published-24 May, 2019 | 16:44

Updated-05 Aug, 2024 | 09:14

Processing messages after error may result in user after free memory fault in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables in MDM9150, MDM9206, MDM9607, MDM9650, MSM8909W, QCS605, Qualcomm 215, SD 425, SD 439 / SD 429, SD 450, SD 625, SD 632, SD 636, SD 675, SD 712 / SD 710 / SD 670, SD 820, SD 820A, SD 845 / SD 850, SD 855, SDA660, SDM439, SDM630, SDM660, SDX20, SDX24, SM7150

Vendor-Qualcomm Technologies, Inc.

Product-sd_712 sd_850 mdm9150_firmware sd_632 sd_855 sd_820a sd_675 sd_439 sdx20 sd_670_firmware sd_425 sd_429 sdm660 sdm439 mdm9607_firmware sd_710_firmware mdm9650 sd_636 sdm630 sdx24 sd_625 sm7150_firmware msm8909w_firmware mdm9607 qm215 sd_636_firmware sd_820_firmware sd_820 sd_450_firmware sd_845_firmware sm7150 sd_439_firmware sd_820a_firmware mdm9150 sd_429_firmware qcs605_firmware sd_675_firmware mdm9206 sd_425_firmware sd_850_firmware sdx24_firmware sd_625_firmware sd_450 sdm439_firmware sd_712_firmware sdm630_firmware sda660_firmware sd_845 qm215_firmware qcs605 mdm9206_firmware sd_670 sd_632_firmware mdm9650_firmware sd_710 sdx20_firmware sda660 msm8909w sdm660_firmware sd_855_firmware Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables

CWE ID-CWE-416

Use After Free

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.24% / 15.53%

||

7 Day CHG~0.00%

Published-05 Dec, 2017 | 19:00

Updated-13 May, 2026 | 00:24

In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, a crafted binder request can cause an arbitrary unmap in MediaServer.

Vendor-Google LLC Qualcomm Technologies, Inc.

Product-android Android for MSM, Firefox OS for MSM, QRD Android

CWE ID-CWE-416

Use After Free

Matching Score-10

Assigner-Samsung Mobile

Matching Score-10

Assigner-Samsung Mobile

CVSS Score-4.4||MEDIUM

EPSS-0.10% / 0.83%

||

7 Day CHG~0.00%

Published-07 Oct, 2022 | 00:00

Updated-03 Aug, 2024 | 12:07

A use after free vulnerability in perf-mgr driver prior to SMR Oct-2022 Release 1 allows attacker to cause memory access fault.

Vendor-Google LLC Qualcomm Technologies, Inc.Samsung Electronics

Product-sm8150 android sm8250 Samsung Mobile Devices

CWE ID-CWE-416

Use After Free

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.25% / 16.67%

||

7 Day CHG~0.00%

Published-25 Feb, 2019 | 23:00

Updated-05 Aug, 2024 | 09:14

Use-after-free vulnerability will occur as there is no protection for the route table`s rule in IPA driver in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in versions MDM9150, MDM9206, MDM9607, MDM9640, MDM9650, MSM8909W, MSM8996AU, QCS605, SD 210/SD 212/SD 205, SD 425, SD 427, SD 430, SD 435, SD 439 / SD 429, SD 450, SD 625, SD 636, SD 712 / SD 710 / SD 670, SD 820, SD 820A, SD 835, SD 845 / SD 850, SD 855, SDA660, SDM439, SDM630, SDM660, SDX20, SDX24.

Vendor-Qualcomm Technologies, Inc.

Product-sd_850 mdm9150_firmware mdm9640_firmware sd_820a msm8996au_firmware sd_439 sd_670_firmware sd_429 sdx24 sdm439 mdm9650 sd_636 msm8909w_firmware msm8996au sd_820 sd_450_firmware sd_845_firmware sd_820a_firmware qcs605_firmware mdm9206 sd_425_firmware sdx24_firmware sd_625_firmware sd_450 sd_845 mdm9206_firmware qcs605 mdm9640 sd_835_firmware mdm9650_firmware sd_835 sda660 sd_210_firmware msm8909w sd_205_firmware sd_212 sd_427_firmware sd_712 sd_855 sdx20 sd_425 sdm660 sd_430_firmware mdm9607_firmware sd_435 sd_710_firmware sdm630 sd_625 sd_210 mdm9607 sd_636_firmware sd_820_firmware sd_439_firmware mdm9150 sd_429_firmware sd_212_firmware sd_850_firmware sdm439_firmware sd_712_firmware sdm630_firmware sda660_firmware sd_427 sd_430 sd_670 sd_435_firmware sd_710 sdx20_firmware sd_205 sdm660_firmware sd_855_firmware Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

CWE ID-CWE-416

Use After Free

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-6.7||MEDIUM

EPSS-0.12% / 2.30%

||

7 Day CHG~0.00%

Published-09 Feb, 2023 | 06:58

Updated-03 Aug, 2024 | 08:01

Use after free in Trusted Application Environment

Memory corruption due to use after free in trusted application environment.

Vendor-Qualcomm Technologies, Inc.

Product-qca6564au_firmware wcd9380_firmware sdm429w msm8996au_firmware sd429 sdxr2_5g sd865_5g wcn6851_firmware qca6564au sdx55m_firmware mdm9628_firmware qca6574au sd205 sd429_firmware msm8996au sd205_firmware qca6564a_firmware sdm429w_firmware wcd9340 wsa8810_firmware qualcomm215_firmware wcd9380 wsa8810 sd870 qca6390_firmware qca6436 qualcomm215 wcn6851 sd210_firmware qca6574a qca6426 apq8096au sd870_firmware qca6391_firmware sdxr2_5g_firmware qca6390 mdm9628 wcd9340_firmware wcn3660b wsa8815 wcn6850 apq8096au_firmware sd210 sd865_5g_firmware wcn3620_firmware qca6426_firmware wcn3660b_firmware wcn6850_firmware qca6574a_firmware wcn3620 qca6574au_firmware wsa8815_firmware wcn3610_firmware qca6564a qca6391 sdx55m qca6436_firmware wcn3610 Snapdragon qca6564au_firmware wcd9380_firmware msm8996au_firmware sd870_firmware qca6391_firmware sdxr2_5g_firmware wcn6851_firmware sdx55m_firmware mdm9628_firmware wcd9340_firmware apq8096au_firmware sd429_firmware sd205_firmware sdm429w_firmware qca6564a_firmware sd865_5g_firmware wcn3620_firmware qca6426_firmware wsa8810_firmware qualcomm215_firmware wcn3660b_firmware wcn6850_firmware qca6574a_firmware wsa8815_firmware qca6574au_firmware qca6390_firmware wcn3610_firmware sd210_firmware qca6436_firmware

CWE ID-CWE-416

Use After Free

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.21% / 11.40%

||

7 Day CHG~0.00%

Published-14 Jun, 2019 | 17:02

Updated-05 Aug, 2024 | 09:21

Use-after-free vulnerability will occur if reset of the routing table encounters an invalid rule id while processing command to reset in Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables in MDM9150, MDM9206, MDM9607, MDM9650, MSM8909W, QCS405, QCS605, SD 625, SD 636, SD 675, SD 712 / SD 710 / SD 670, SD 730, SD 820, SD 820A, SD 835, SD 845 / SD 850, SD 855, SDM630, SDM660, SDX20, SDX24

Vendor-Qualcomm Technologies, Inc.

Product-sd_712 sd_850 mdm9150_firmware sd_855 sd_730_firmware sd_820a sd_675 sdx20 sd_670_firmware sdm660 sdx24 sdm630 mdm9607_firmware sd_710_firmware sd_636 mdm9650 qcs405 sd_625 msm8909w_firmware mdm9607 sd_636_firmware sd_820_firmware sd_820 sd_845_firmware sd_820a_firmware mdm9150 qcs605_firmware sd_675_firmware mdm9206 sd_730 sd_850_firmware sdx24_firmware sd_625_firmware qcs405_firmware sd_712_firmware sdm630_firmware sd_845 mdm9206_firmware qcs605 sd_670 sd_835_firmware mdm9650_firmware sd_710 sdx20_firmware sd_835 msm8909w sdm660_firmware sd_855_firmware Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables

CWE ID-CWE-416

Use After Free

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.12% / 1.90%

||

7 Day CHG~0.00%

Published-02 May, 2023 | 05:08

Updated-03 Aug, 2024 | 08:01

Use after free in Qualcomm IPC

Memory corruption in Qualcomm IPC due to use after free while receiving the incoming packet and reposting it.

Vendor-Qualcomm Technologies, Inc.

Product-sm6225 sm6225-ad_firmware wcn3950 wcd9375 wcd9370_firmware sm6225_firmware wcn3988_firmware wcn3950_firmware wcn3988 wsa8810_firmware wsa8810 wcd9375_firmware sm6225-ad sg4150p wcd9370 sg4150p_firmware Snapdragon

CWE ID-CWE-416

Use After Free

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.18% / 8.14%

||

7 Day CHG~0.00%

Published-11 Feb, 2019 | 15:00

Updated-05 Aug, 2024 | 09:14

In all android releases(Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, Heap memory was accessed after it was freed

Vendor-Qualcomm Technologies, Inc.Google LLC

Product-android Android for MSM, Firefox OS for MSM, QRD Android

CWE ID-CWE-416

Use After Free

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.21% / 11.40%

||

7 Day CHG~0.00%

Published-24 May, 2019 | 16:44

Updated-05 Aug, 2024 | 09:21

Use-after-free condition due to Improper handling of hrtimers when the PMU driver tries to access its events in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables in MDM9206, MDM9607, MDM9650, MSM8909W, QCS605, Qualcomm 215, SD 425, SD 439 / SD 429, SD 450, SD 625, SD 632, SD 636, SD 712 / SD 710 / SD 670, SD 820A, SD 845 / SD 850, SD 855, SDM439, SDM630, SDM660, SDX24

Vendor-Qualcomm Technologies, Inc.

Product-sd_712 sd_850 sd_632 sd_855 sd_820a sd_439 sd_670_firmware sd_429 sd_425 sdm660 sdm439 mdm9607_firmware sd_710_firmware mdm9650 sd_636 sdm630 sdx24 sd_625 msm8909w_firmware mdm9607 qm215 sd_636_firmware sd_450_firmware sd_845_firmware sd_439_firmware sd_820a_firmware sd_429_firmware qcs605_firmware mdm9206 sd_425_firmware sd_850_firmware sdx24_firmware sd_625_firmware sd_450 sdm439_firmware sd_712_firmware sdm630_firmware sd_845 qm215_firmware qcs605 mdm9206_firmware sd_670 sd_632_firmware mdm9650_firmware sd_710 msm8909w sdm660_firmware sd_855_firmware Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables

CWE ID-CWE-416

Use After Free

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-8.4||HIGH

EPSS-0.20% / 10.28%

||

7 Day CHG~0.00%

Published-07 Apr, 2021 | 07:55

Updated-04 Aug, 2024 | 11:28

When sending a socket event message to a user application, invalid information will be passed if socket is freed by other thread resulting in a Use After Free condition in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

Vendor-Qualcomm Technologies, Inc.

Product-qfe3100 qfe2080fc_firmware qca9377_firmware qfs2580 qpm5679_firmware mdm9640_firmware pmd9607_firmware qfe4455fc_firmware qca8337 qfs2530 qln1030 pm6125 qat5522_firmware wcn3950_firmware pm8150a qdm5670 qca6595au_firmware qpm5541_firmware sa6155 pm7150l qcc1110_firmware pm8998_firmware qpa8821 wtr5975_firmware qpa5580_firmware msm8108 wcn3998 wcd9371_firmware msm8108_firmware wcn3950 mdm9206_firmware qsw8573_firmware wcn3660b sd450_firmware qfe4320 qsw8574_firmware smb2351_firmware pm8953_firmware qpa4360_firmware wcn3998_firmware qfe2520_firmware apq8009w_firmware pm855p apq8053_firmware qca6420 wtr4605_firmware qca9367_firmware pm660_firmware pm8150b sa8155_firmware qfe2101 qca6430 qat3522 qfe4455fc wcd9340 sdm830_firmware sd765g sdr660 msm8209_firmware sdr865 mdm9250_firmware qdm5620_firmware smb1358 qca6696_firmware qln5020 wcd9371 sd870_firmware smb1350 pmm855au_firmware wtr3950 qfe3340 qdm5621 qtc800s qat3514_firmware sd660 sd712 pm640p_firmware sd660_firmware qcn7606_firmware qat5516_firmware sd450 pm855l_firmware qtc410s wcn3991 qpa8801 sdm429w pm8150l_firmware qat5533_firmware sdx55m_firmware sdxr25g qpa8673_firmware pm6150 sd670_firmware qca6574 sd632_firmware qpa8842 sdr052_firmware pmm8996au wcd9380 qualcomm215 qpm5579_firmware smb1380_firmware qfe4309_firmware smb1381 pm855p_firmware qfe3100_firmware pm7250 qca9379_firmware wtr4905 qpa8803 sdx24_firmware sd439_firmware sdxr25g_firmware pmd9645 qdm2301 wcd9340_firmware wsa8815 qfe2101_firmware qca6584_firmware qdm2301_firmware qdm5621_firmware qpm6375 sd835 wcn3980_firmware sd730 qfe3320_firmware pm660l_firmware pm8008 qtm525_firmware pme605_firmware pme605 sd678_firmware apq8064au_firmware qpm5621_firmware qln1021aq_firmware qcs603 rsw8577 qpa6560_firmware qpa8802_firmware qfe4308_firmware qpm5621 qpm6582 sd670 pm8009_firmware apq8009w qfe4303 qfs2580_firmware qcn7605_firmware pm8150l pmi8998_firmware pm660a_firmware pm215 ar8031 qpm5577 wtr2965 sdm630_firmware sa2150p qca6391_firmware sd820_firmware pmx20_firmware pm8150 pmi8937_firmware wcd9370_firmware qat3516_firmware sdx55 apq8053 csra6640 qat3555_firmware pmi8994 qpa8803_firmware wcn3660 qca9379 pm855b smb2351 qln1031 qcn7606 pm8909 pm660 qet6110_firmware qpm6325 pm6125_firmware qbt1500 mdm9628_firmware mdm9650 pmx24_firmware qbt1500_firmware pmk8001 pmm855au mdm9250 qca6420_firmware apq8009_firmware pm7150a sd675_firmware qpa4361_firmware qca6426 wcn3990_firmware qca9377 qpa5373_firmware sdw2500_firmware wcd9385_firmware qdm5650_firmware qpa4340_firmware wcd9326_firmware whs9410 wcn3615_firmware wtr2955 rgr7640au_firmware pm7250_firmware sdr845_firmware qdm5620 qln1021aq smb1380 pmk8002_firmware qsw6310_firmware sa8155 qca6584 qln1031_firmware sdx55_firmware qat5533 wcn3615 sm7250p_firmware wcn3610_firmware qsm7250_firmware pm7150l_firmware qca6584au msm8208 qat5515_firmware pm855 qpm8830_firmware sd429 pm8250 qca9367 qfe2082fc_firmware sdm630 mdm9607_firmware mdm9655_firmware qfs2530_firmware pmx55 sd205 sd429_firmware pm8150c_firmware qca6421 qdm3301 qpa8842_firmware qat3519_firmware pm8953 qat5515 qpm5677 qat3514 wcd9326 wcd9335 pm8004_firmware sdr8150_firmware pm439 qtc800h_firmware qca6390 wcd9375 aqt1000 qln4642 msm8917_firmware qpm5677_firmware sdx20_firmware wsa8815_firmware wtr3925_firmware pmi8937 pm8998 sdw3100 smr525_firmware qfe4301_firmware apq8017 qln1020_firmware pm670a_firmware pmx55_firmware wtr2955_firmware qbt1000_firmware qfe4373fc_firmware qca6595 pm8150_firmware qpm8830 pmm8996au_firmware qat5522 pm8150c sd665_firmware qpa4360 qpa4361 mdm9206 qpm5577_firmware qdm5679_firmware smr525 qca6310_firmware qfe4305_firmware pmr525 pm8150a_firmware qca6574_firmware wtr3950_firmware qln1036aq_firmware sd665 pm6150_firmware qca6175a sd765 pmx20 pmd9607 qca6574a_firmware qat3555 apq8009 qfe2082fc sd8c_firmware wtr2965_firmware pm670_firmware qln1036aq qtc801s qfe3320 sd710 mdm9607 pm8008_firmware qln1035bd_firmware sdx20m_firmware pmw3100 pmx50 sdr8250 sd768g qln1030_firmware smb1350_firmware pmw3100_firmware pm8004 pm640l pmk8002 sdw2500 apq8096au_firmware sd845 sdm830 smb1357 qca6175a_firmware qpa5580 qpm5579 qfe2550 pmi8996 qca6431_firmware qpa8802 wcd9360_firmware qpm6585_firmware qat3519 qbt2000_firmware pm855a_firmware qtc800h sdr8250_firmware qca6335 msm8917 csra6620_firmware qcs605_firmware qln1020 wtr3905 qdm5671 csra6640_firmware pmc1000h qpm4650_firmware qat3518 sd8c sd632 smr526_firmware mdm9628 pm640a_firmware qpa5460 wgr7640_firmware qdm2305_firmware qpm5670_firmware sd710_firmware qca4020 qdm5652 qca6574au_firmware wcd9375_firmware qpm5679 qbt2000 sa6155_firmware msm8909w wcd9360 sdx20m pmx50_firmware whs9410_firmware qpa5460_firmware wcn3999 qdm3301_firmware pm8996 qsm7250 qcc1110 qcs405 smb1360 qualcomm215_firmware qfe3440fc rsw8577_firmware pm439_firmware qca4020_firmware qca6436 sa6155p qcs603_firmware qpa6560 wcn3660_firmware wcd9341 pmi8952 mdm9655 pm8937_firmware qca6431 qet4100_firmware qfe4320_firmware sd855_firmware qdm5650 wtr3925 qfe2080fc sdr052 smb1390 sdw3100_firmware msm8208_firmware qet4100 wcn3610 msm8608 mdm9640 qpa8686_firmware qpm6585 qca8337_firmware wcd9380_firmware smb1355 qln4650 qtc800t_firmware wcd9330 msm8996au_firmware wgr7640 csr6030 qet5100 qdm5671_firmware qpa8801_firmware qca6564au sd636 pm8005_firmware qet4101_firmware pm7250b qln4642_firmware pmk8001_firmware smb1355_firmware pm7250b_firmware pmd9655_firmware smb1351_firmware pm8996_firmware qet4200aq_firmware sdx50m_firmware smb1395 smb358s pm660l smb358s_firmware ar8151 smr526 wtr5975 qca6174 qca6430_firmware qtc801s_firmware wcd9335_firmware qat3522_firmware wcn3980 qca6335_firmware qsw8573 qcs605 qbt1000 qca6320 mdm9650_firmware qca6426_firmware wcn3660b_firmware wcn3680 qfe4309 pm8009 sdr051_firmware wcd9330_firmware sdx55m pm670a qca6421_firmware wtr3905_firmware qfe4373fc msm8953 qat3518_firmware pmi8998 qfe2520 qsw8574 sd821_firmware ar8031_firmware wcn3680_firmware pm855l qdm5670_firmware sd8655g pm7150a_firmware pm8150b_firmware qfe4302 pmc1000h_firmware qca6564a_firmware pmd9645_firmware sd870 pm670 sd210_firmware qdm5677 pm8005 pm855_firmware qdm2302 sdxr1 pm855b_firmware apq8096au qca6595_firmware qcs405_firmware qpm6582_firmware qpm6375_firmware pm640l_firmware pmi8996_firmware qln4650_firmware qet5100m sa8155p sd675 wtr4605 sd439 qet4101 qat3516 pm670l qpm5658 ar8035_firmware qpm5658_firmware wcn3991_firmware qdm5652_firmware qfe4465fc sd678 sdr051 qln5030 pmi632 qpa2625_firmware qfe2081fc_firmware smb1360_firmware csra6620 qet5100_firmware qpa5373 pm670l_firmware sdr660g sd765g_firmware qpa8686 smb1358_firmware qca6390_firmware qca6174_firmware sd730_firmware wcd9370 pmr525_firmware qca6584au_firmware qfe3340_firmware ar8151_firmware pmi632_firmware qcn7605 qpm5541 qat5516 qpa8821_firmware qfe4308 sdr660g_firmware pm3003a qca6320_firmware wcn3680b_firmware qca6595au wcn3999_firmware qca6436_firmware qtc800t qca6564au_firmware qdm2305 sa6155p_firmware qca6310 pm8937 qfe2081fc qln5020_firmware sa515m_firmware sd821 sd712_firmware apq8017_firmware wsa8810_firmware smb231 sd765_firmware qdm5677_firmware qet4200aq qca6174a_firmware wcd9385 qpm6325_firmware qdm2302_firmware qat3550_firmware qln5040_firmware ar8035 apq8064au qpa8673 qfe2550_firmware qln5030_firmware msm8953_firmware sd210 wcn3620_firmware qfe4302_firmware sd820 wcn3620 csr6030_firmware qca6564a pmx24 qet6110 pmi8952_firmware qln5040 qpm8895 sdr845 qpm5670 wcn3990 qfe3440fc_firmware sdx24 pmi8994_firmware msm8909w_firmware msm8996au sdm429w_firmware rgr7640au qln1035bd pm855a sdr660_firmware pm8909_firmware qca6574a pm8916_firmware smb1390_firmware qca6174a qfe4303_firmware qet5100m_firmware qpm4650 qtm525 sa515m sa2150p_firmware sd855 sd8cx qfe4305 pm640p sd768g_firmware sdr865_firmware msm8209 qfe4465fc_firmware pm8250_firmware smb1351 qca6391 sd8cx_firmware sdxr1_firmware smb1357_firmware aqt1000_firmware pm215_firmware qpm8895_firmware pm660a qpa4340 sdx50m pm640a sdr8150 sdx20 pm8916 smb1395_firmware pmd9655 qca6574au sa8155p_firmware sd205_firmware qsw6310 sd8655g_firmware wcd9341_firmware wsa8810 qtc410s_firmware smb231_firmware wtr4905_firmware qat3550 qdm5679 wcn3680b sd835_firmware pm3003a_firmware qca6696 qfe4301 qtc800s_firmware smb1381_firmware sd845_firmware msm8608_firmware qpa2625 sm7250p sd636_firmware Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

CWE ID-CWE-416

Use After Free

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.25% / 16.67%

||

7 Day CHG~0.00%

Published-25 Feb, 2019 | 23:00

Updated-05 Aug, 2024 | 09:14

KGSL syncsource lock not handled properly during syncsource cleanup can lead to use after free issue in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables in MDM9206, MDM9607, MDM9650, MSM8909W, QCS605, SD 210/SD 212/SD 205, SD 439 / SD 429, SD 712 / SD 710 / SD 670, SD 820A, SD 845 / SD 850, SD 855, SDM439, SDM660, SDX24.

Vendor-Qualcomm Technologies, Inc.

Product-sd_712 sd_850 sd_855 sd_820a sd_439 sd_670_firmware sd_429 sdm660 sdx24 sdm439 mdm9607_firmware sd_710_firmware mdm9650 msm8909w_firmware mdm9607 sd_210 sd_845_firmware sd_439_firmware sd_820a_firmware sd_429_firmware qcs605_firmware mdm9206 sd_212_firmware sd_850_firmware sdx24_firmware sdm439_firmware sd_712_firmware sd_845 mdm9206_firmware qcs605 sd_670 mdm9650_firmware sd_710 sd_205 sd_210_firmware msm8909w sd_205_firmware sdm660_firmware sd_212 sd_855_firmware Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables

CWE ID-CWE-416

Use After Free

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.07% / 0.12%

||

7 Day CHG~0.00%

Published-06 Apr, 2026 | 15:33

Updated-08 Apr, 2026 | 20:54

Use After Free in DSP Service

Memory Corruption when using deprecated DMABUF IOCTL calls to manage video memory.

Vendor-Qualcomm Technologies, Inc.

CWE ID-CWE-416

Use After Free

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.18% / 8.14%

||

7 Day CHG~0.00%

Published-11 Feb, 2019 | 15:00

Updated-05 Aug, 2024 | 08:24

In all android releases(Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, Use-after-free issue in heap while loading audio effects config in audio effects factory.

Vendor-Qualcomm Technologies, Inc.Google LLC

Product-android Android for MSM, Firefox OS for MSM, QRD Android

CWE ID-CWE-416

Use After Free

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.18% / 7.38%

||

7 Day CHG~0.00%

Published-18 Sep, 2018 | 18:00

Updated-05 Aug, 2024 | 08:17

In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, lack fo check on return value in WMA response handler can lead to potential use after free.

Vendor-Qualcomm Technologies, Inc.Google LLC

Product-android Android for MSM, Firefox OS for MSM, QRD Android

CWE ID-CWE-416

Use After Free

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.11% / 1.55%

||

7 Day CHG~0.00%

Published-26 Nov, 2024 | 13:56

Updated-06 Feb, 2025 | 16:41

Use After Free in Video

Crafted Binder Request Causes Heap UAF in MediaServer

Vendor-Qualcomm Technologies, Inc.

CWE ID-CWE-416

Use After Free

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.18% / 7.50%

||

7 Day CHG~0.00%

Published-20 Dec, 2018 | 15:00

Updated-05 Aug, 2024 | 08:24

In all android releases(Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, A use after free condition can occur in the SPS driver which can lead to error in kernel.

Vendor-Qualcomm Technologies, Inc.Google LLC

Product-android Android for MSM, Firefox OS for MSM, QRD Android

CWE ID-CWE-416

Use After Free

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.18% / 8.14%

||

7 Day CHG~0.00%

Published-11 Feb, 2019 | 15:00

Updated-05 Aug, 2024 | 08:24

In all android releases(Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, Null pointer dereference vulnerability may occur due to missing NULL assignment in NAT module of freed pointer.

Vendor-Qualcomm Technologies, Inc.Google LLC

Product-android Android for MSM, Firefox OS for MSM, QRD Android

CWE ID-CWE-416

Use After Free

CWE ID-CWE-476

NULL Pointer Dereference

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.19% / 8.83%

||

7 Day CHG~0.00%

Published-18 Sep, 2018 | 18:00

Updated-05 Aug, 2024 | 08:01

In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, while calling IPA_IOC_MDFY_RT_RULE IPA IOCTL, header entry is not checked before use. If IPA_IOC_MDFY_RT_RULE IOCTL called for header entries formerly deleted, a Use after free condition will occur.

Vendor-Qualcomm Technologies, Inc.Google LLC

Product-android Android for MSM, Firefox OS for MSM, QRD Android

CWE ID-CWE-416

Use After Free

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-6.7||MEDIUM

EPSS-0.12% / 2.45%

||

7 Day CHG~0.00%

Published-13 Dec, 2022 | 00:00

Updated-22 Apr, 2025 | 16:15

Memory corruption in diag due to use after free while processing dci packet in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking

Vendor-Qualcomm Technologies, Inc.

Product-wcd9380_firmware qcn9072_firmware msm8996au qca6310 qca6595au_firmware qcn9000 qualcomm215_firmware sd429_firmware sd730 ipq6028 qcn9070 qcn5122 qsm8250_firmware qca6564au qca6426_firmware wcn3660b sd720g ipq8078a sd205_firmware msm8996au_firmware qca9889_firmware qcn5124 wsa8815 ipq9008 wcn3680b qca6430 wcn3620_firmware sd855 ipq9008_firmware wcd9340 sdx55_firmware sdxr2_5g_firmware qcn5022_firmware mdm9650 qca8072 qca6574a sd865_5g_firmware sdm429w_firmware sd835_firmware qcn5024 ipq4019_firmware qca9994 qca6335 sd_675 qcn5024_firmware qca6595 qca6430_firmware qca8081 sd870 ipq6018 mdm9150 ipq5018_firmware ipq9574 qca6390_firmware qcn9024_firmware ipq4028_firmware ipq8072a ipq8070a ipq8070a_firmware qca9880_firmware sd870_firmware sm6250 qcs8155 ipq8078_firmware ipq4019 qca6595au wcd9370 wcn3980 qcn5152 qca9992 qcn9022 sd720g_firmware ipq8065_firmware qca9985_firmware mdm9150_firmware qca9888_firmware sdx55m wcn6850_firmware qcn9274 wsa8810_firmware wsa8815_firmware wcn3991_firmware ipq8078 ipq8076a qca6436 ipq8071a qca4024 sa8155p wsa8810 aqt1000_firmware qcn9012 ipq8076 wcd9335_firmware qcn5154_firmware ar9380_firmware qca6391 qcn9024 qcn5052_firmware wcn3998_firmware wcn6851 wcd9370_firmware sd675 qca6420_firmware ipq8074a qcn6023_firmware sd210_firmware ipq4028 qca9886_firmware qca7500_firmware ipq8174 ipq8064_firmware qcn6122 sdm429w ipq8070 qcs610 qualcomm215 qca6391_firmware sd205 qcn9012_firmware sa8155p_firmware sa6145p wcn3610 wcd9375 ipq8076_firmware qca9980_firmware sd865_5g wcn3990_firmware wcn3950_firmware wcn3988 ipq8071a_firmware qca9980 qca6310_firmware qcs8155_firmware qca6436_firmware qcn5021_firmware wcd9341_firmware ipq8074a_firmware qca9886 ipq6000_firmware qcn6102 ipq4018 wcd9340_firmware sd_675_firmware qca6564a_firmware qcn5021 sd855_firmware qcn5054_firmware mdm9650_firmware qca9889 sdx50m qcn6024_firmware sdx55 ipq5018 wcn3610_firmware qca9990 wcn3660b_firmware qca7500 sa6145p_firmware ipq5028_firmware qca6390 sda429w_firmware sdx50m_firmware ipq5010_firmware sa6155p qca4024_firmware wcn6850 csr8811 wcn3950 ipq6018_firmware qca6320_firmware qcn9100_firmware qcn5122_firmware qcn6024 wcd9335 ipq8078a_firmware sd835 wcn3680b_firmware qca6595_firmware ipq6010 qca6574au_firmware ipq4029_firmware qca6564_firmware qcs610_firmware qcn9074 qcn9274_firmware qcn5054 wcd9380 qcn6102_firmware qcn5052 sd730_firmware ipq8064 wcd9375_firmware ipq8070_firmware qca9880 qcn6132_firmware aqt1000 qcn5152_firmware qcn6100_firmware qca9985 qcn6112 qca8072_firmware qsm8250 qca6420 qca9898_firmware qcn5124_firmware sa515m sd845_firmware sa515m_firmware qcn5164_firmware qca9994_firmware wcn3990 sd429 ipq6028_firmware qcn6023 qca8081_firmware qca9984 ipq8068 wcn3998 csr8811_firmware qca8337_firmware qca9898 qca8075_firmware qcn5164 qcn6122_firmware qca9990_firmware ipq8068_firmware ipq8072a_firmware sd678 qca6574au qcn6112_firmware ipq4029 ipq9574_firmware apq8096au qcs410_firmware qcn9000_firmware sd210 ipq8173_firmware ipq8065 qcn9070_firmware pmp8074 qca8075 pmp8074_firmware sd678_firmware ipq6010_firmware qca9984_firmware wcn3991 ipq8076a_firmware ar9380 qca6564a sd675_firmware qca6574a_firmware qca9888 sda429w qca6320 ipq8174_firmware qca8337 sm6250_firmware qcn6100 sdxr2_5g qcn6132 wcd9341 wcn3980_firmware wcn6851_firmware ipq4018_firmware sa6155p_firmware qcn9074_firmware qca9992_firmware qcn5154 apq8096au_firmware ipq8173 qcn9072 qca6564au_firmware qca6426 qca6335_firmware sdx55m_firmware qcn9100 qcn5022 ipq6000 wcn3620 qca6564 ipq5010 wcn3988_firmware qcn9022_firmware ipq5028 sd845 qcs410 Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking

CWE ID-CWE-416

Use After Free

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-8.4||HIGH

EPSS-0.14% / 3.92%

||

7 Day CHG~0.00%

Published-15 Nov, 2022 | 00:00

Updated-22 Apr, 2025 | 16:15

Memory corruption in graphics due to use-after-free while importing graphics buffer in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

Vendor-Qualcomm Technologies, Inc.

Product-wcd9380_firmware wcn3615_firmware msm8996au sd429_firmware qca6595au_firmware qualcomm215_firmware sd730 qca6310 apq8009 mdm9607 qca6696 qca6421 qsm8250_firmware qca6564au sdx24 wcn3660b qca6426_firmware sd632_firmware sd720g sa6150p sd460 sd710_firmware sd205_firmware msm8996au_firmware apq8056 sdx24_firmware wsa8830 wsa8815 wcn3680b qca6430 wcn3620_firmware sd855 qcs6490_firmware wcd9340 sdx55_firmware sdxr2_5g_firmware msm8976sg_firmware mdm9650 sd765g_firmware qca6574a msm8108_firmware sd865_5g_firmware apq8017_firmware qcm6125_firmware sdm429w_firmware sd835_firmware wcn6750 sa8295p_firmware sm7325p msm8917_firmware sd_636_firmware sd695_firmware qcc5100 sd_675 qca6335 sd625_firmware msm8108 qcs405 qca6595 qca6431_firmware msm8208 csra6640 sd480_firmware apq8064au_firmware qca6430_firmware qca8081 sm7315_firmware sm7325p_firmware qca6584au apq8009w sd870 mdm9150 qca9367 qca6390_firmware qcn9024_firmware sa6155_firmware wcn6855 wcn3910 sd870_firmware qcm6490_firmware sm6250 qcs8155 sdm630_firmware qca6431 qca6595au wcd9370 sd821_firmware qcs4290_firmware sd888_firmware wcn3980 sm4125_firmware sd439_firmware sm7315 sd765_firmware sd720g_firmware sd765g sd670 mdm9150_firmware sdx55m msm8208_firmware msm8917 qam8295p sd450 wcn6850_firmware wcn3660 sm6250p wsa8810_firmware wsa8815_firmware wcn3991_firmware sa8150p sd625 wcn6740 msm8608_firmware qca6436 apq8064au msm8952_firmware sa8155p sdxr1 wsa8810 msm8909w sdm630 sw5100p_firmware aqt1000_firmware wsa8835_firmware wcd9335_firmware sm7250p_firmware apq8009_firmware qca6391 qcn9024 wcn3998_firmware csra6620 wcn6851 sd778g_firmware wcd9370_firmware sd675 qca6420_firmware sd439 wcn3660_firmware qcc5100_firmware sd210_firmware qcm6125 apq8052_firmware qca4020_firmware sdx12 sd660 csrb31024_firmware sa4150p_firmware sdm429w sdx20 qcs610 qualcomm215 apq8052 qca6391_firmware sd205 wcd9326_firmware sm7250p sa8155p_firmware csra6620_firmware wcn3610 sdx20_firmware sa6145p wcn3910_firmware msm8209 apq8017 wcd9375 sd750g_firmware msm8976_firmware qca6696_firmware sm6250p_firmware sd865_5g qca9377 wcn3990_firmware wcn3950_firmware wcn3988 sd778g wcd9371_firmware wcn3615 msm8976 sd750g sd768g_firmware qcs605 msm8952 qca6310_firmware sd710 qcs8155_firmware qca6436_firmware sa8195p_firmware qca4020 qca9367_firmware sd_636 wcd9341_firmware sd821 sd632 wcd9340_firmware sd_675_firmware qca6174a_firmware qca6564a_firmware sd855_firmware sd662_firmware wcd9371 mdm9650_firmware sdx50m qcs405_firmware qcn6024_firmware qcs6490 sdx55 sd460_firmware msm8956 mdm9628 wcn3610_firmware sa6155 qcm4290_firmware msm8976sg sd450_firmware sd820 wcn3660b_firmware sm4375 msm8909w_firmware sdx20m_firmware wcd9360_firmware sdw2500 sdw2500_firmware sa6145p_firmware sd626 sd768g wcn6740_firmware wcn6856 sd626_firmware sm4125 sda429w_firmware sdx50m_firmware apq8009w_firmware sa6155p qca6390 sa8150p_firmware sd480 wcd9330 sa8145p_firmware sw5100 wcn6850 sa8145p sa415m wcn3950 msm8608 qca6320_firmware qca6584au_firmware qcm6490 qcn6024 qca6174a wcd9335 wcn3999 sd835 sd670_firmware wcn3680b_firmware qca6595_firmware qca6421_firmware qca6574au_firmware sd662 mdm9250_firmware qam8295p_firmware qca6564_firmware sa8295p qcs610_firmware msm8956_firmware qca6174 qcm2290_firmware wcd9380 ar8031 qcm4290 wcn3680 mdm9628_firmware sd660_firmware sd730_firmware sd695 qca6174_firmware wcd9375_firmware sd888 sa6150p_firmware ar8035_firmware wcn6856_firmware aqt1000 sdx12_firmware ar8035 wcn6855_firmware qsm8250 qca6420 wcd9360 sd780g_firmware wcn3680_firmware qcm2290 sdx65_firmware mdm9250 sa515m sd845_firmware mdm9206 sdxr1_firmware sa515m_firmware mdm9607_firmware wcn3990 apq8076 sd429 apq8076_firmware sd690_5g qca8081_firmware wsa8835 wcn3998 ar8031_firmware apq8056_firmware qca8337_firmware mdm9206_firmware qcs2290 sd820_firmware wcd9385 sd678 qca6574au sdx65 wcd9385_firmware apq8096au wcn6750_firmware qcs410_firmware sd210 sd680 sd888_5g sd678_firmware qca9379 wcn3999_firmware qcs6125 sm4375_firmware wcn3991 qca6574 csra6640_firmware qca6574_firmware sa415m_firmware qca6564a sdx20m sa8195p sd675_firmware qca6574a_firmware sda429w sa8155_firmware wsa8830_firmware sd888_5g_firmware qca6320 qca8337 sm6250_firmware sdxr2_5g wcd9341 wcn3980_firmware qcs2290_firmware wcn6851_firmware wcd9326 sd680_firmware qca9379_firmware sa6155p_firmware sa4150p qca9377_firmware apq8096au_firmware sw5100_firmware sd780g qca6564au_firmware csrb31024 qca6426 qca6335_firmware sdx55m_firmware qcs6125_firmware sd690_5g_firmware sa8155 wcn3620 sd765 qcs605_firmware qca6564 wcd9330_firmware wcn3988_firmware qcs4290 msm8209_firmware sw5100p sd845 qcs410 Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

CWE ID-CWE-416

Use After Free

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-8.4||HIGH

EPSS-0.12% / 1.88%

||

7 Day CHG~0.00%

Published-17 Oct, 2022 | 00:00

Updated-13 May, 2025 | 20:15

Memory corruption in multimedia due to use after free during callback registration failure in Snapdragon Mobile

Vendor-Qualcomm Technologies, Inc.

Product-wcn6855 wsa8830 wcn6855_firmware sm8475 wcn7851_firmware wcn6856 wsa8830_firmware wcn7850_firmware wcn7850 wcn6856_firmware wsa8835 sd_8_gen1_5g_firmware wcd9380 wcn7851 wsa8835_firmware wcd9380_firmware Snapdragon Mobile

CWE ID-CWE-416

Use After Free

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-8.4||HIGH

EPSS-0.12% / 2.09%

||

7 Day CHG~0.00%

Published-16 Sep, 2022 | 05:25

Updated-03 Aug, 2024 | 04:42

Memory corruption in graphics due to use-after-free while graphics profiling in Snapdragon Connectivity, Snapdragon Mobile

Vendor-Qualcomm Technologies, Inc.

CWE ID-CWE-416

Use After Free

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.27% / 18.08%

||

7 Day CHG~0.00%

Published-26 Oct, 2018 | 13:00

Updated-05 Aug, 2024 | 08:01

When a series of FDAL messages are sent to the modem, a Use After Free condition can occur in Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear in version MDM9206, MDM9607, MDM9640, MDM9650, MSM8909W, MSM8996AU, SD 210/SD 212/SD 205, SD 425, SD 430, SD 450, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 820, SD 820A, SD 835, SD 845, SDA660, SDX20.

Vendor-Qualcomm Technologies, Inc.

CWE ID-CWE-416

Use After Free

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-8.4||HIGH

EPSS-0.13% / 2.98%

||

7 Day CHG~0.00%

Published-12 Oct, 2022 | 00:00

Updated-15 May, 2025 | 19:15

Memory corruption in graphics due to use-after-free in graphics dispatcher logic in Snapdragon Mobile

Vendor-Qualcomm Technologies, Inc.

Product-wcn6855 wsa8830 wcn6855_firmware sm8475 wcn7851_firmware wcn6856 wsa8830_firmware wcn7850_firmware wcn7850 wcn6856_firmware wsa8835 sd_8_gen1_5g_firmware wcd9380 wcn7851 wsa8835_firmware wcd9380_firmware Snapdragon Mobile

CWE ID-CWE-416

Use After Free

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-8.4||HIGH

EPSS-0.12% / 2.09%

||

7 Day CHG~0.00%

Published-16 Sep, 2022 | 05:25

Updated-03 Aug, 2024 | 03:00

Memory corruption in synx driver due to use-after-free condition in the synx driver due to accessing object handles without acquiring lock in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile

Vendor-Qualcomm Technologies, Inc.

Product-qcm2290_firmware wcn3991_firmware wcn3991 wsa8830 wcd9380_firmware qcs2290_firmware sd865_5g sdx55m_firmware wsa8835 qcs4290 wcn3950_firmware wcd9380 sd765g_firmware qcs2290 qca6390_firmware sd690_5g wcd9370 sd690_5g_firmware qca6426 qrb5165n_firmware wcn3998 sd439_firmware wcd9385_firmware sdxr2_5g_firmware wcn3950 sm4125 wcd9326_firmware wcn3615_firmware sd855 sm4125_firmware wcn6850 wsa8815 sd662 wcn3910 sd460_firmware sd765 qca6426_firmware wcn3680b_firmware sdx55_firmware sd768g_firmware wcd9375_firmware wcn3615 wcn3998_firmware qrb5165m sm7250p_firmware sd460 qca6391 sdx55m apq8053_firmware qca6436_firmware qrb5165n sd680_firmware msm8953 qcm4290 qrb5165_firmware qrb5165m_firmware sdxr2_5g qrb5165 wcn6851_firmware sd662_firmware wcn3988_firmware wsa8810_firmware sd765g wcd9341_firmware qcm4290_firmware sd765_firmware sd870 qca6436 sd680 wcd9326 wcn6851 wsa8810 wcn3680b qcs4290_firmware wcd9385 wcd9341 sd768g sd750g sd870_firmware qca6391_firmware qca6390 wcd9375 sd750g_firmware wcn3910_firmware wcd9370_firmware sdx55 msm8953_firmware apq8053 wsa8830_firmware sd855_firmware sd865_5g_firmware sd439 wcn3988 wcn6850_firmware wsa8815_firmware wsa8835_firmware sm7250p qcm2290 Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile

CWE ID-CWE-416

Use After Free