ByteOS

Snapdragon Compute, Snapdragon Mobile, Snapdragon Wired Infrastructure and Networking

Product

Versions

Affected

IPQ6018, IPQ8074, QCA8081, SC8180X, SXR2130

Problem Types

Type	CWE ID	Description
text	N/A	Use After Free Issue in WLAN

Type: text

CWE ID: N/A

Description: Use After Free Issue in WLAN

References

Hyperlink	Resource
https://www.qualcomm.com/company/product-security/bulletins/may-2020-bulletin	x_refsource_CONFIRM

Hyperlink: https://www.qualcomm.com/company/product-security/bulletins/may-2020-bulletin

Resource:

x_refsource_CONFIRM

▼Authorized Data Publishers (ADP)

CVE Program Container

References

Hyperlink	Resource
https://www.qualcomm.com/company/product-security/bulletins/may-2020-bulletin	x_refsource_CONFIRM x_transferred

Hyperlink: https://www.qualcomm.com/company/product-security/bulletins/may-2020-bulletin

Resource:

x_refsource_CONFIRM

x_transferred

▼National Vulnerability Database (NVD)

nvd.nist.gov

Source:product-security@qualcomm.com

Published At:02 Jun, 2020 | 15:15

Updated At:02 Jun, 2020 | 20:10

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Primary	3.1	7.8	HIGH	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Primary	2.0	7.2	HIGH	AV:L/AC:L/Au:N/C:C/I:C/A:C

Type: Primary

Version: 3.1

Base score: 7.8

Base severity: HIGH

Vector:

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Type: Primary

Version: 2.0

Base score: 7.2

Base severity: HIGH

Vector:

AV:L/AC:L/Au:N/C:C/I:C/A:C

CPE Matches

cpe:2.3:o:qualcomm:qca8081_firmware:-:*:*:*:*:*:*:*

>>qca8081_firmware>>-

cpe:2.3:h:qualcomm:qca8081:-:*:*:*:*:*:*:*

>>qca8081>>-

cpe:2.3:o:qualcomm:sc8180x_firmware:-:*:*:*:*:*:*:*

>>sc8180x_firmware>>-

cpe:2.3:h:qualcomm:sc8180x:-:*:*:*:*:*:*:*

>>sc8180x>>-

cpe:2.3:o:qualcomm:ipq6018_firmware:-:*:*:*:*:*:*:*

>>ipq6018_firmware>>-

cpe:2.3:h:qualcomm:ipq6018:-:*:*:*:*:*:*:*

>>ipq6018>>-

cpe:2.3:o:qualcomm:ipq8074_firmware:-:*:*:*:*:*:*:*

>>ipq8074_firmware>>-

cpe:2.3:h:qualcomm:ipq8074:-:*:*:*:*:*:*:*

>>ipq8074>>-

cpe:2.3:o:qualcomm:sxr2130_firmware:-:*:*:*:*:*:*:*

>>sxr2130_firmware>>-

cpe:2.3:h:qualcomm:sxr2130:-:*:*:*:*:*:*:*

>>sxr2130>>-

Weaknesses

CWE ID	Type	Source
CWE-416	Primary	nvd@nist.gov

CWE ID: CWE-416

Type: Primary

Source: nvd@nist.gov

References

Hyperlink	Source	Resource
https://www.qualcomm.com/company/product-security/bulletins/may-2020-bulletin	product-security@qualcomm.com	Vendor Advisory

Hyperlink: https://www.qualcomm.com/company/product-security/bulletins/may-2020-bulletin

Source: product-security@qualcomm.com

Resource:

Vendor Advisory

Similar CVEs

2154Records found

CVE-2019-10518

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.04% / 12.54%

7 Day CHG~0.00%

Published-18 Dec, 2019 | 05:25

Updated-04 Aug, 2024 | 22:24

Use after free of a pointer in iWLAN scenario during netmgr state transition to CONNECT in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking in APQ8009, APQ8017, APQ8053, APQ8064, APQ8096AU, APQ8098, IPQ4019, IPQ8064, IPQ8074, MDM9150, MDM9206, MDM9207C, MDM9607, MDM9640, MDM9650, MSM8905, MSM8909, MSM8909W, MSM8917, MSM8920, MSM8937, MSM8939, MSM8940, MSM8953, MSM8996AU, MSM8998, QCA6574AU, QCS405, QCS605, SDA660, SDA845, SDM429, SDM439, SDM630, SDM632, SDM636, SDM660, SDM670, SDM710, SDM845, SDX20, SDX24, SDX55, SM6150, SM7150, SM8150, SM8250, SXR1130, SXR2130

Product-mdm9150_firmware mdm9640_firmware sdm632_firmware msm8996au_firmware sdm845 sdm632 sdx24 sdm439 mdm9650 sdm429 msm8940_firmware sm7150_firmware sm6150 msm8909w_firmware msm8996au sm7150 apq8009_firmware msm8917 sdm670 sxr2130 qcs605_firmware ipq4019_firmware mdm9206 sdm670_firmware sdx24_firmware ipq8074 sdm636 sda845_firmware apq8098 mdm9206_firmware msm8939 qcs605 msm8937_firmware mdm9650_firmware sdm429_firmware msm8905_firmware qca6574au_firmware sda660 sdx55_firmware ipq8064 sxr1130_firmware apq8064_firmware sxr1130 msm8909w apq8009 msm8909_firmware apq8053_firmware ipq8064_firmware sda845 msm8920 msm8953 sdm636_firmware apq8064 sdm845_firmware apq8098_firmware sdx20 msm8998_firmware sdm660 msm8920_firmware sdm630 mdm9607_firmware sm8250_firmware qcs405 ipq8074_firmware qca6574au sdm710 mdm9607 apq8017_firmware sdm710_firmware msm8939_firmware mdm9150 msm8937 mdm9207c_firmware msm8905 mdm9207c sm8150_firmware msm8909 sxr2130_firmware apq8096au sdm439_firmware qcs405_firmware sdm630_firmware sda660_firmware ipq4019 sdx55 msm8953_firmware msm8940 sm6150_firmware apq8053 apq8096au_firmware msm8917_firmware sm8250 msm8998 sm8150 sdx20_firmware apq8017 sdm660_firmware mdm9640 Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking

CWE ID-CWE-416

Use After Free

CVE-2019-10580

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.10% / 27.68%

7 Day CHG~0.00%

Published-30 Jul, 2020 | 11:40

Updated-04 Aug, 2024 | 22:24

When kernel thread unregistered listener, Use after free issue happened as the listener client`s private data has been already freed in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in MDM9607, MSM8909W, Nicobar, QCM2150, QCS405, QCS605, Saipan, SC8180X, SDM429W, SDX55, SM8150, SM8250, SXR2130

CWE ID-CWE-416

Use After Free

CVE-2019-10602

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.04% / 9.57%

7 Day CHG~0.00%

Published-21 Jan, 2020 | 06:30

Updated-04 Aug, 2024 | 22:24

Potential use-after-free heap error during Validate/Present calls on display HW composer in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables in APQ8053, APQ8096AU, APQ8098, MDM9206, MDM9207C, MDM9607, MDM9650, MSM8909W, MSM8917, MSM8920, MSM8937, MSM8940, MSM8953, MSM8996AU, QCS605, SDA660, SDM845, SDX20, SM8150

CWE ID-CWE-416

Use After Free

CVE-2024-21472

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-8.4||HIGH

EPSS-0.08% / 24.04%

7 Day CHG+0.02%

Published-01 Apr, 2024 | 15:06

Updated-13 Jan, 2025 | 21:54

Use After Free in Kernel

Memory corruption in Kernel while handling GPU operations.

Product-sa8770p_firmware snapdragon_685_4g_mobile_firmware wsa8840_firmware qam8255p_firmware qca6797aq_firmware fastconnect_7800_firmware sa8155p qam8255p qca6595au_firmware snapdragon_auto_5g_modem-rf_gen_2 sg8275p_firmware wsa8845_firmware qam8650p_firmware qca6574_firmware snapdragon_8_gen_1_mobile sa8255p_firmware qca6595au snapdragon_auto_5g_modem-rf_gen_2_firmware wcd9390 wsa8835 snapdragon_680_4g_mobile wcn3950 fastconnect_7800 wsa8845h_firmware wcd9395_firmware wsa8830 sa8295p_firmware qca6696 qcm4325 sa8295p qca6584au_firmware fastconnect_6900 qca6574au_firmware snapdragon_685_4g_mobile wsa8845 snapdragon_680_4g_mobile_firmware qcm4325_firmware qca6584au qca6595 sa8155p_firmware wsa8835_firmware qca6595_firmware sa8255p wcd9390_firmware qca6574a qca6797aq wsa8845h qam8775p_firmware wcd9385_firmware fastconnect_6900_firmware qam8295p_firmware wcd9380 wcn3950_firmware wcd9385 wcd9395 qam8650p sa8770p sa8195p_firmware qca6574a_firmware qca6574 qca6696_firmware sa8775p sa6155p wsa8830_firmware sa9000p_firmware qca6698aq sa6155p_firmware qam8775p qam8295p wcd9380_firmware sa9000p snapdragon_8_gen_1_mobile_firmware sa8775p_firmware qca6698aq_firmware wsa8840 sg8275p qca6574au sa8195p Snapdragon qam8255p_firmware sa6155p_firmware wcd9380_firmware sa8775p_firmware wsa8840_firmware sg8275p_firmware fastconnect_6900_firmware qca6797aq_firmware sa8155p_firmware wcn3950_firmware fastconnect_7800_firmware qca6595au_firmware wcd9395_firmware sa8255p_firmware snapdragon_8_gen_1_mobile_platform_firmware qca6698aq_firmware qam8650p_firmware sa8770p_firmware snapdragon_auto_5g_modem-rf_gen_2_firmware qam8775p_firmware qca6584au_firmware qca6696_firmware qca6595_firmware wcd9385_firmware qcm4325_firmware qca6574_firmware wcd9390_firmware wsa8830_firmware wsa8845_firmware qam8295p_firmware sa9000p_firmware qca6574a_firmware wsa8835_firmware qca6574au_firmware sa8195p_firmware wsa8845h_firmware sa8295p_firmware snapdragon_680_4g_mobile_platform_firmware

CWE ID-CWE-416

Use After Free

CVE-2019-10583

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.04% / 9.57%

7 Day CHG~0.00%

Published-21 Jan, 2020 | 06:30

Updated-04 Aug, 2024 | 22:24

Use after free issue occurs when camera access sensors data through direct report mode in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in APQ8096AU, MDM9607, MSM8909W, Nicobar, QCS605, SA6155P, SDA845, SDM429W, SDM670, SDM710, SDM845, SM6150, SM8150, SM8250, SXR1130, SXR2130

CWE ID-CWE-416

Use After Free

CVE-2019-10548

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.04% / 9.57%

7 Day CHG~0.00%

Published-21 Jan, 2020 | 06:30

Updated-04 Aug, 2024 | 22:24

While trying to obtain datad ipc handle during DPL initialization, Heap use-after-free issue can occur if modem SSR occurs at same time in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Wearables in APQ8009, APQ8053, APQ8096AU, MSM8905, MSM8909, MSM8909W, MSM8917, MSM8920, MSM8937, MSM8939, MSM8940, MSM8953, MSM8996AU, MSM8998, Nicobar, QCA6574AU, QCS605, QM215, SDA660, SDM429, SDM429W, SDM439, SDM450, SDM630, SDM632, SDM636, SDM660, SDM670, SDM710, SDM845, SM6150, SM7150, SM8150, SXR1130

Product-sdm429w msm8996au_firmware sdm632_firmware sdm845 sdm450_firmware sdm632 sdm439 sdm429 msm8940_firmware sm7150_firmware sm6150 msm8909w_firmware msm8996au sdm429w_firmware sm7150 apq8009_firmware msm8917 sdm670 qcs605_firmware sdm670_firmware sdm636 msm8939 qcs605 msm8937_firmware sdm429_firmware msm8905_firmware qca6574au_firmware sda660 sxr1130_firmware sxr1130 apq8009 msm8909w msm8909_firmware apq8053_firmware nicobar msm8920 msm8953 sdm450 sdm636_firmware msm8998_firmware sdm660 msm8920_firmware sdm630 qca6574au sdm710 qm215 sdm710_firmware msm8939_firmware msm8937 msm8905 sm8150_firmware msm8909 apq8096au sdm439_firmware sdm630_firmware sda660_firmware qm215_firmware msm8940 apq8053 apq8096au_firmware msm8953_firmware sm6150_firmware msm8917_firmware msm8998 sm8150 nicobar_firmware sdm660_firmware sdm845_firmware Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Wearables

CWE ID-CWE-416

Use After Free

CVE-2019-10585

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.04% / 9.57%

7 Day CHG~0.00%

Published-21 Jan, 2020 | 06:30

Updated-04 Aug, 2024 | 22:24

Possible integer overflow happens when mmap find function will increment refcount every time when it invokes and can lead to use after free issue in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables in APQ8009, APQ8053, MDM9607, MDM9640, MSM8909W, MSM8917, MSM8953, Nicobar, QCS605, QM215, SDA845, SDM429, SDM429W, SDM439, SDM450, SDM632, SDM660, SDM670, SDM710, SDM845, SDX24, SDX55, SM6150, SM8150, SM8250, SXR1130, SXR2130

CWE ID-CWE-416

Use After Free

CWE ID-CWE-190

Integer Overflow or Wraparound

CVE-2019-10582

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.04% / 9.57%

7 Day CHG~0.00%

Published-21 Jan, 2020 | 06:30

Updated-04 Aug, 2024 | 22:24

Use after free issue due to using of invalidated iterator to delete an object in sensors HAL in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in APQ8096AU, MSM8909W, Nicobar, QCS605, SA6155P, SDA845, SDM429W, SDM670, SDM710, SDM845, SM6150, SM8150, SM8250, SXR1130, SXR2130

CWE ID-CWE-416

Use After Free

CVE-2024-38415

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.03% / 7.61%

7 Day CHG~0.00%

Published-04 Nov, 2024 | 10:04

Updated-07 Nov, 2024 | 19:41

Use After Free in Computer Vision

Memory corruption while handling session errors from firmware.

CWE ID-CWE-416

Use After Free

CVE-2023-28577

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-6.7||MEDIUM

EPSS-0.03% / 5.78%

7 Day CHG~0.00%

Published-08 Aug, 2023 | 09:15

Updated-02 Aug, 2024 | 13:43

Multiple Dmabuf Kernel Address UAF Vulnerability

In the function call related to CAM_REQ_MGR_RELEASE_BUF there is no check if the buffer is being used. So when a function called cam_mem_get_cpu_buf to get the kernel va to use, another thread can call CAM_REQ_MGR_RELEASE_BUF to unmap the kernel va which cause UAF of the kernel address.

Product-fastconnect_7800 snapdragon_865_5g wcd9380_firmware wsa8830 qcs610 sw5100p sd865_5g fastconnect_6900 fastconnect_6800 fastconnect_6900_firmware snapdragon_8_gen_1_firmware wcn3988_firmware qcn9074 snapdragon_870_5g wsa8835 wcn3950_firmware snapdragon_8_gen_1 wsa8810_firmware wcd9380 wcd9341_firmware fastconnect_7800_firmware sw5100 wsa8810 qca6436 qcs410 snapdragon_865\+_5g snapdragon_x55_5g qcs610_firmware sw5100p_firmware sxr2130 wcd9370 snapdragon_865\+_5g_firmware wcn3680b qca6426 sxr2130_firmware wcd9341 wcn3980 qca6391_firmware wcn3950 snapdragon_xr2_5g_firmware wcd9370_firmware wcn3660b wsa8815 snapdragon_870_5g_firmware wsa8830_firmware sd865_5g_firmware qca6426_firmware wcn3660b_firmware wcn3988 wsa8815_firmware snapdragon_x55_5g_firmware wcn3680b_firmware wsa8835_firmware sw5100_firmware qcn9074_firmware fastconnect_6800_firmware qcs410_firmware snapdragon_865_5g_firmware qca6391 wcn3980_firmware qca6436_firmware snapdragon_xr2_5g Snapdragon wcd9380_firmware sxr2130_firmware qca6391_firmware fastconnect_6900_firmware wcd9370_firmware qca6436_firmware wcn3988_firmware wsa8830_firmware sd865_5g_firmware snapdragon_xr2_5g_platform_firmware wcn3950_firmware qca6426_firmware wcn3660b_firmware wsa8810_firmware wsa8815_firmware wcd9341_firmware fastconnect_7800_firmware qcs610_firmware wsa8835_firmware wcn3680b_firmware snapdragon_865_5g_mobile_platform_firmware sw5100_firmware qcn9074_firmware fastconnect_6800_firmware sw5100p_firmware qcs410_firmware snapdragon_8_gen_1_mobile_platform_firmware snapdragon_x55_5g_modem-rf_system_firmware wcn3980_firmware

CWE ID-CWE-416

Use After Free

CVE-2019-14032

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.04% / 9.57%

7 Day CHG~0.00%

Published-05 Mar, 2020 | 08:56

Updated-05 Aug, 2024 | 00:05

Memory use after free issue in audio due to lack of resource control in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking in APQ8009, APQ8017, APQ8053, APQ8096AU, APQ8098, MDM9206, MDM9207C, MDM9607, MDM9640, MDM9650, MSM8905, MSM8909W, MSM8953, MSM8996AU, Nicobar, QCS405, QCS605, Rennell, SA6155P, Saipan, SC8180X, SDA845, SDM670, SDM710, SDM845, SDX20, SDX24, SDX55, SM6150, SM7150, SM8150, SM8250, SXR1130, SXR2130

Product-mdm9640_firmware msm8996au_firmware sdm845 sdx24 mdm9650 sm7150_firmware sm6150 msm8909w_firmware msm8996au sm7150 apq8009_firmware sdm670 sxr2130 qcs605_firmware sc8180x mdm9206 sdm670_firmware sdx24_firmware sda845_firmware apq8098 mdm9206_firmware qcs605 mdm9640 mdm9650_firmware msm8905_firmware sxr1130_firmware sdx55_firmware sxr1130 msm8909w apq8009 apq8053_firmware sda845 nicobar sa6155p_firmware msm8953 apq8098_firmware sdx20 mdm9607_firmware sm8250_firmware sc8180x_firmware qcs405 sdm710 mdm9607 apq8017_firmware sdm710_firmware sa6155p mdm9207c_firmware msm8905 mdm9207c sm8150_firmware sxr2130_firmware apq8096au qcs405_firmware rennell rennell_firmware sdx55 msm8953_firmware apq8053 apq8096au_firmware saipan_firmware sm6150_firmware sm8250 sm8150 sdx20_firmware apq8017 nicobar_firmware saipan sdm845_firmware Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking

CWE ID-CWE-416

Use After Free

CVE-2019-14034

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.04% / 9.57%

7 Day CHG~0.00%

Published-21 Jan, 2020 | 06:30

Updated-05 Aug, 2024 | 00:05

Use after free while processing eeprom query as there is a chance to not unlock mutex after error occurs in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in APQ8009, APQ8053, MSM8909W, MSM8917, MSM8953, Nicobar, QCS605, QM215, Rennell, SA6155P, SDA845, SDM429, SDM429W, SDM439, SDM450, SDM632, SDM670, SDM710, SDM845, SDX24, SDX55, SM6150, SM7150, SM8150, SM8250, SXR1130, SXR2130

CWE ID-CWE-416

Use After Free

CVE-2019-14117

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.04% / 9.57%

7 Day CHG~0.00%

Published-08 Sep, 2020 | 09:31

Updated-05 Aug, 2024 | 00:12

u'Whenever the page list is updated via privileged user, the previous list elements are freed but are not deleted from the list which results in a use after free causing an unhandled page fault exception in rmnet driver' in Snapdragon Auto, Snapdragon Compute, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in Bitra, MDM9607, QCS405, Saipan, SC8180X, SDX55, SM6150, SM7150, SM8150, SM8250, SXR2130

CWE ID-CWE-416

Use After Free

CVE-2019-14087

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.03% / 7.69%

7 Day CHG~0.00%

Published-02 Jun, 2020 | 15:05

Updated-05 Aug, 2024 | 00:12

Failure in buffer management while accessing handle for HDR blit when color modes not supported by display in Snapdragon Consumer IOT, Snapdragon Mobile, Snapdragon Wearables in MSM8909W, QCS605

Product-qcs605 qcs605_firmware msm8909w_firmware msm8909w Snapdragon Consumer IOT, Snapdragon Mobile, Snapdragon Wearables

CWE ID-CWE-416

Use After Free

CVE-2019-14040

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-1.43% / 79.86%

7 Day CHG~0.00%

Published-07 Feb, 2020 | 05:00

Updated-05 Aug, 2024 | 00:05

Using memory after being freed in qsee due to wrong implementation can lead to unexpected behavior such as execution of unknown code in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in APQ8009, APQ8017, APQ8053, APQ8096AU, APQ8098, MDM9150, MDM9206, MDM9207C, MDM9607, MDM9640, MDM9650, MSM8905, MSM8909W, MSM8917, MSM8920, MSM8937, MSM8940, MSM8953, MSM8996AU, MSM8998, QCS605, QM215, SDA660, SDA845, SDM429, SDM429W, SDM439, SDM450, SDM630, SDM632, SDM636, SDM660, SDM845, SDX20, SDX24, SM8150, SXR1130

Product-mdm9150_firmware mdm9640_firmware sdm429w msm8996au_firmware sdm632_firmware sdm845 sdm450_firmware sdm632 sdx24 sdm439 mdm9650 sdm429 msm8940_firmware msm8909w_firmware msm8996au sdm429w_firmware apq8009_firmware msm8917 qcs605_firmware mdm9206 sdx24_firmware sdm636 sda845_firmware apq8098 mdm9206_firmware qcs605 mdm9640 msm8937_firmware mdm9650_firmware sdm429_firmware msm8905_firmware sda660 sxr1130_firmware sxr1130 msm8909w apq8009 apq8053_firmware sda845 msm8920 msm8953 sdm450 sdm636_firmware apq8098_firmware sdx20 msm8998_firmware sdm660 msm8920_firmware sdm630 mdm9607_firmware qm215 mdm9607 apq8017_firmware mdm9150 msm8937 mdm9207c_firmware msm8905 mdm9207c sm8150_firmware apq8096au sdm439_firmware sdm630_firmware sda660_firmware qm215_firmware msm8940 apq8053 apq8096au_firmware msm8953_firmware msm8917_firmware msm8998 sm8150 sdx20_firmware apq8017 sdm660_firmware sdm845_firmware Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

CWE ID-CWE-416

Use After Free

CVE-2023-22383

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-6.7||MEDIUM

EPSS-0.04% / 11.08%

7 Day CHG~0.00%

Published-05 Dec, 2023 | 03:03

Updated-11 Aug, 2025 | 15:06

Use After Free in Camera

Memory Corruption in camera while installing a fd for a particular DMA buffer.

Product-sw5100p qcs410_firmware sa6150p_firmware sd865_5g snapdragon_865_5g_mobile_platform_firmware qcs8155_firmware c-v2x_9150_firmware sa6155p_firmware qam8295p_firmware sd855 qcs610_firmware sxr2130_firmware wcd9370 wsa8830_firmware qca6696 snapdragon_870_5g_mobile_platform_firmware qca6436_firmware wcd9341_firmware snapdragon_wear_4100\+_platform_firmware snapdragon_w5\+_gen_1_wearable_platform_firmware wcn3610_firmware qca6426 snapdragon_855\+\/860_mobile_platform_firmware fastconnect_6700 wcn3610 qca6420 snapdragon_865\+_5g_mobile_platform_firmware qcn9074 qca6430 wsa8815_firmware sa8195p_firmware wcd9370_firmware qca8337_firmware sdx55_firmware qca8337 qca6426_firmware snapdragon_x55_5g_modem-rf_system_firmware wcn3660b sxr2130 qca6574au_firmware sa8195p qam8295p wcd9341 qca6574au snapdragon_855_mobile_platform wcn3950 wsa8810_firmware snapdragon_xr2_5g_platform snapdragon_855_mobile_platform_firmware qca6420_firmware aqt1000_firmware wcn3988 qcs6490_firmware sd855_firmware wcn3980_firmware wcn3660b_firmware qca6436 wsa8835 qca6391_firmware qca6430_firmware snapdragon_870_5g_mobile_platform sw5100p_firmware fastconnect_6800_firmware sa8295p_firmware qca6696_firmware snapdragon_865_5g_mobile_platform wcd9380_firmware sa6150p qcs410 sa8155p_firmware wsa8815 wcn3680b_firmware video_collaboration_vc1_platform_firmware sa8155p wsa8830 c-v2x_9150 sa6145p qcn9074_firmware sw5100_firmware sdx55 qsm8250_firmware fastconnect_6800 fastconnect_6900 qca6391 video_collaboration_vc1_platform wcn3950_firmware snapdragon_x55_5g_modem-rf_system fastconnect_6900_firmware sa8295p wcd9380 sa6145p_firmware fastconnect_6200 wcn3680b sa8145p_firmware snapdragon_xr2_5g_platform_firmware sd865_5g_firmware sa8150p qcs8155 sa8150p_firmware snapdragon_855\+\/860_mobile_platform snapdragon_w5\+_gen_1_wearable_platform wcn3988_firmware sa6155p fastconnect_6700_firmware video_collaboration_vc3_platform_firmware sa8145p snapdragon_wear_4100\+_platform wsa8835_firmware wsa8810 qcs6490 wcn3980 snapdragon_865\+_5g_mobile_platform qsm8250 fastconnect_6200_firmware sw5100 video_collaboration_vc3_platform aqt1000 qcs610 Snapdragon

CWE ID-CWE-416

Use After Free

CWE ID-CWE-787

Out-of-bounds Write

CVE-2020-3701

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.10% / 27.68%

7 Day CHG~0.00%

Published-30 Jul, 2020 | 11:40

Updated-04 Aug, 2024 | 07:44

Use after free issue while processing error notification from camx driver due to not properly releasing the sequence data in Snapdragon Mobile in Saipan, SM8250, SXR2130

Product-saipan_firmware sm8250 sxr2130_firmware saipan sxr2130 sm8250_firmware Snapdragon Mobile

CWE ID-CWE-416

Use After Free

CVE-2024-38421

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.03% / 7.61%

7 Day CHG~0.00%

Published-04 Nov, 2024 | 10:04

Updated-07 Nov, 2024 | 19:44

Use After Free in Graphics Linux

Memory corruption while processing GPU commands.

Product-qam8255p_firmware wsa8830 qam8650p qam8775p qamsrv1m wsa8840 wcn3950_firmware srv1l_firmware wcn6755_firmware qca6595au_firmware snapdragon_480_5g_mobile_platform video_collaboration_vc3_platform wcd9370 qcs6125_firmware snapdragon_480\+_5g_mobile_platform_firmware snapdragon_480_5g_mobile_platform_firmware qamsrv1h wcd9385_firmware qam8295p wcn7881_firmware wcn3950 fastconnect_6200 qamsrv1h_firmware qca6688aq qam8295p_firmware sa9000p_firmware snapdragon_695_5g_mobile_platform_firmware qca6574au_firmware sa7255p wsa8845h_firmware wcd9375_firmware snapdragon_8_gen_3_mobile_platform qca6595au wcn7860 snapdragon_w5\+_gen_1_wearable_platform_firmware sa8620p_firmware sa6155p_firmware wcn7881 qca6678aq_firmware sa8775p_firmware qcs6490 wsa8840_firmware qca6698aq sm4635 qcs6125 video_collaboration_vc5_platform sm8635 wcn3988_firmware wcn7880_firmware srv1h sa7775p_firmware sa8195p wsa8810_firmware sw5100 wsa8845h wcn6755 wcd9395_firmware sa8255p_firmware sm8750p_firmware sm8750_firmware sa6155p qcs7230 qca6698aq_firmware sa7775p qam8620p wcd9385 sa8770p_firmware sa8255p qam8775p_firmware qca6696_firmware qcs6490_firmware qca6797aq wcd9375 wcd9390 wsa8830_firmware wsa8815_firmware wcn3988 wsa8835_firmware sa8195p_firmware video_collaboration_vc5_platform_firmware sa8295p_firmware wcn7880 sa8770p qcm6125_firmware qca6688aq_firmware sm4635_firmware sw5100p wcd9378_firmware snapdragon_w5\+_gen_1_wearable_platform qca6595 qcs7230_firmware wsa8835 qca6574 snapdragon_4_gen_1_mobile_platform_firmware sm8635_firmware qca6574a video_collaboration_vc3_platform_firmware wcn3980 wsa8845 sa8650p sa9000p qca6574_firmware wsa8815 wsa8845_firmware snapdragon_4_gen_1_mobile_platform qcs8250 sm8750p sa8775p qca6574a_firmware fastconnect_6200_firmware wcn3980_firmware qca6391 sa8295p fastconnect_7800 qca6678aq wcn7861_firmware wsa8832_firmware sa8650p_firmware srv1h_firmware video_collaboration_vc1_platform_firmware qca6797aq_firmware qca6574au sa8155p_firmware srv1l sa7255p_firmware qcs8250_firmware qcm6125 wsa8810 sa8620p wsa8832 fastconnect_7800_firmware sw5100p_firmware srv1m_firmware qamsrv1m_firmware sm8750 qam8650p_firmware wcn7860_firmware qca6595_firmware wcn7861 wcd9395 qca6696 qca6391_firmware wcd9370_firmware wcd9390_firmware snapdragon_8_gen_3_mobile_platform_firmware sa8155p snapdragon_695_5g_mobile_platform video_collaboration_vc1_platform srv1m sw5100_firmware qam8620p_firmware wcd9378 qam8255p snapdragon_480\+_5g_mobile_platform Snapdragon qam8255p_firmware qualcomm_video_collaboration_vc1_platform_firmware sm4635_firmware wcd9378_firmware qcs7230_firmware wcn3950_firmware srv1l_firmware wcn6755_firmware qca6595au_firmware snapdragon_4_gen_1_mobile_platform_firmware sm8635_firmware qcs6125_firmware snapdragon_480_5g_mobile_platform_firmware qualcomm_video_collaboration_vc3_platform_firmware wcd9385_firmware wcn7881_firmware qamsrv1h_firmware qca6574_firmware wsa8845_firmware qam8295p_firmware sa9000p_firmware qca6574a_firmware fastconnect_6200_firmware qca6574au_firmware snapdragon_695_5g_mobile_platform_firmware wcd9375_firmware wsa8845h_firmware wcn3980_firmware sa8620p_firmware sa6155p_firmware qca6678aq_firmware sa8775p_firmware wcn7861_firmware sa8650p_firmware wsa8832_firmware wsa8840_firmware srv1h_firmware qca6797aq_firmware wcn3988_firmware wcn7880_firmware sa8155p_firmware sa7775p_firmware sa7255p_firmware wsa8810_firmware qcs8250_firmware fastconnect_7800_firmware wcd9395_firmware sa8255p_firmware sm8750_firmware sm8750p_firmware sw5100p_firmware qca6698aq_firmware qamsrv1m_firmware srv1m_firmware qam8650p_firmware sa8770p_firmware qam8775p_firmware qca6696_firmware qca6595_firmware qcs6490_firmware wcn7860_firmware qca6391_firmware wcd9370_firmware qualcomm_video_collaboration_vc5_platform_firmware snapdragon_8_gen_3_mobile_platform_firmware wcd9390_firmware wsa8830_firmware wsa8815_firmware wsa8835_firmware sa8195p_firmware sw5100_firmware qam8620p_firmware sa8295p_firmware qca6688aq_firmware qcm6125_firmware

CWE ID-CWE-416

Use After Free

CVE-2023-22668

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-6.7||MEDIUM

EPSS-0.04% / 11.08%

7 Day CHG~0.00%

Published-05 Dec, 2023 | 03:03

Updated-02 Aug, 2024 | 10:13

Use After Free in Audio

Memory Corruption in Audio while invoking IOCTLs calls from the user-space.

CWE ID-CWE-416

Use After Free

CVE-2023-21672

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-8.4||HIGH

EPSS-0.04% / 13.13%

7 Day CHG~0.00%

Published-04 Jul, 2023 | 04:46

Updated-02 Aug, 2024 | 09:44

Use After Free in Audio

Memory corruption in Audio while running concurrent tunnel playback or during concurrent audio tunnel recording sessions.

CWE ID-CWE-416

Use After Free

CVE-2018-13900

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.05% / 15.39%

7 Day CHG~0.00%

Published-25 Feb, 2019 | 23:00

Updated-05 Aug, 2024 | 09:14

Use-after-free vulnerability will occur as there is no protection for the route table`s rule in IPA driver in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in versions MDM9150, MDM9206, MDM9607, MDM9640, MDM9650, MSM8909W, MSM8996AU, QCS605, SD 210/SD 212/SD 205, SD 425, SD 427, SD 430, SD 435, SD 439 / SD 429, SD 450, SD 625, SD 636, SD 712 / SD 710 / SD 670, SD 820, SD 820A, SD 835, SD 845 / SD 850, SD 855, SDA660, SDM439, SDM630, SDM660, SDX20, SDX24.

Product-sd_850 mdm9150_firmware mdm9640_firmware sd_820a msm8996au_firmware sd_439 sd_670_firmware sd_429 sdx24 sdm439 mdm9650 sd_636 msm8909w_firmware msm8996au sd_820 sd_450_firmware sd_845_firmware sd_820a_firmware qcs605_firmware mdm9206 sd_425_firmware sdx24_firmware sd_625_firmware sd_450 sd_845 mdm9206_firmware qcs605 mdm9640 sd_835_firmware mdm9650_firmware sd_835 sda660 sd_210_firmware msm8909w sd_205_firmware sd_212 sd_427_firmware sd_712 sd_855 sdx20 sd_425 sdm660 sd_430_firmware mdm9607_firmware sd_435 sd_710_firmware sdm630 sd_625 sd_210 mdm9607 sd_636_firmware sd_820_firmware sd_439_firmware mdm9150 sd_429_firmware sd_212_firmware sd_850_firmware sdm439_firmware sd_712_firmware sdm630_firmware sda660_firmware sd_427 sd_430 sd_670 sd_435_firmware sd_710 sdx20_firmware sd_205 sdm660_firmware sd_855_firmware Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

CWE ID-CWE-416

Use After Free

CVE-2024-23373

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-8.4||HIGH

EPSS-0.11% / 30.28%

7 Day CHG-0.00%

Published-01 Jul, 2024 | 14:17

Updated-01 Aug, 2024 | 23:06

Use After Free in Graphics

Memory corruption when IOMMU unmap operation fails, the DMA and anon buffers are getting released.

CWE ID-CWE-416

Use After Free

CVE-2024-23382

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-8.4||HIGH

EPSS-0.03% / 8.26%

7 Day CHG~0.00%

Published-05 Aug, 2024 | 14:21

Updated-26 Nov, 2024 | 16:42

Use After Free in Graphics Linux

Memory corruption while processing graphics kernel driver request to create DMA fence.

CWE ID-CWE-416

Use After Free

CVE-2018-13905

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.05% / 15.39%

7 Day CHG~0.00%

Published-25 Feb, 2019 | 23:00

Updated-05 Aug, 2024 | 09:14

KGSL syncsource lock not handled properly during syncsource cleanup can lead to use after free issue in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables in MDM9206, MDM9607, MDM9650, MSM8909W, QCS605, SD 210/SD 212/SD 205, SD 439 / SD 429, SD 712 / SD 710 / SD 670, SD 820A, SD 845 / SD 850, SD 855, SDM439, SDM660, SDX24.

CWE ID-CWE-416

Use After Free

CVE-2020-3696

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.04% / 12.54%

7 Day CHG~0.00%

Published-02 Nov, 2020 | 06:21

Updated-04 Aug, 2024 | 07:44

u'Use after free while installing new security rule in ipcrtr as old one is deleted and this rule could still be in use for checking security permission for particular process' in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking in APQ8009, APQ8017, APQ8053, APQ8096AU, APQ8098, IPQ4019, IPQ6018, IPQ8064, IPQ8074, MDM9206, MDM9207C, MDM9607, MSM8905, MSM8909W, MSM8996AU, QCA4531, QCA6574AU, QCA9531, QCM2150, QCS605, SDM429W, SDX20, SDX24

CWE ID-CWE-416

Use After Free

CVE-2018-13919

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.04% / 11.44%

7 Day CHG~0.00%

Published-14 Jun, 2019 | 17:02

Updated-05 Aug, 2024 | 09:21

Use-after-free vulnerability will occur if reset of the routing table encounters an invalid rule id while processing command to reset in Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables in MDM9150, MDM9206, MDM9607, MDM9650, MSM8909W, QCS405, QCS605, SD 625, SD 636, SD 675, SD 712 / SD 710 / SD 670, SD 730, SD 820, SD 820A, SD 835, SD 845 / SD 850, SD 855, SDM630, SDM660, SDX20, SDX24

CWE ID-CWE-416

Use After Free

CVE-2024-23383

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-8.4||HIGH

EPSS-0.03% / 8.26%

7 Day CHG~0.00%

Published-05 Aug, 2024 | 14:21

Updated-26 Nov, 2024 | 16:43

Use After Free in Graphics Linux

Memory corruption when kernel driver attempts to trigger hardware fences.

CWE ID-CWE-416

Use After Free

CVE-2018-13920

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.04% / 11.44%

7 Day CHG~0.00%

Published-24 May, 2019 | 16:44

Updated-05 Aug, 2024 | 09:21

Use-after-free condition due to Improper handling of hrtimers when the PMU driver tries to access its events in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables in MDM9206, MDM9607, MDM9650, MSM8909W, QCS605, Qualcomm 215, SD 425, SD 439 / SD 429, SD 450, SD 625, SD 632, SD 636, SD 712 / SD 710 / SD 670, SD 820A, SD 845 / SD 850, SD 855, SDM439, SDM630, SDM660, SDX24

CWE ID-CWE-416

Use After Free

CVE-2018-13899

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.03% / 8.49%

7 Day CHG~0.00%

Published-24 May, 2019 | 16:44

Updated-05 Aug, 2024 | 09:14

Processing messages after error may result in user after free memory fault in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables in MDM9150, MDM9206, MDM9607, MDM9650, MSM8909W, QCS605, Qualcomm 215, SD 425, SD 439 / SD 429, SD 450, SD 625, SD 632, SD 636, SD 675, SD 712 / SD 710 / SD 670, SD 820, SD 820A, SD 845 / SD 850, SD 855, SDA660, SDM439, SDM630, SDM660, SDX20, SDX24, SM7150

CWE ID-CWE-416

Use After Free

CVE-2024-21468

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-8.4||HIGH

EPSS-0.06% / 18.94%

7 Day CHG+0.02%

Published-01 Apr, 2024 | 15:06

Updated-11 Aug, 2025 | 15:06

Use After Free in Kernel

Memory corruption when there is failed unmap operation in GPU.

CWE ID-CWE-416

Use After Free

CVE-2022-22097

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-8.4||HIGH

EPSS-0.07% / 21.23%

7 Day CHG~0.00%

Published-02 Sep, 2022 | 11:31

Updated-03 Aug, 2024 | 03:00

Memory corruption in graphic driver due to use after free while calling multiple threads application to driver. in Snapdragon Consumer IOT

Product-wcd9341 qcs610 wcn3980 wcn3950 wcd9370_firmware wsa8815 wcn3950_firmware wsa8815_firmware wsa8810_firmware wcd9341_firmware qcs610_firmware wsa8810 qcs410_firmware wcn3980_firmware qcs410 wcd9370 Snapdragon Consumer IOT

CWE ID-CWE-416

Use After Free

CVE-2022-39853

Matching Score-10

Assigner-Samsung Mobile

Matching Score-10

Assigner-Samsung Mobile

CVSS Score-4.4||MEDIUM

EPSS-0.02% / 3.79%

7 Day CHG~0.00%

Published-07 Oct, 2022 | 00:00

Updated-03 Aug, 2024 | 12:07

A use after free vulnerability in perf-mgr driver prior to SMR Oct-2022 Release 1 allows attacker to cause memory access fault.

Vendor-Google LLC Qualcomm Technologies, Inc.Samsung Electronics

Product-sm8150 android sm8250 Samsung Mobile Devices

CWE ID-CWE-416

Use After Free

CVE-2022-33225

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-6.7||MEDIUM

EPSS-0.03% / 7.59%

7 Day CHG~0.00%

Published-09 Feb, 2023 | 06:58

Updated-03 Aug, 2024 | 08:01

Use after free in Trusted Application Environment

Memory corruption due to use after free in trusted application environment.

Product-qca6564au_firmware wcd9380_firmware sdm429w msm8996au_firmware sd429 sdxr2_5g sd865_5g wcn6851_firmware qca6564au sdx55m_firmware mdm9628_firmware qca6574au sd205 sd429_firmware msm8996au sd205_firmware qca6564a_firmware sdm429w_firmware wcd9340 wsa8810_firmware qualcomm215_firmware wcd9380 wsa8810 sd870 qca6390_firmware qca6436 qualcomm215 wcn6851 sd210_firmware qca6574a qca6426 apq8096au sd870_firmware qca6391_firmware sdxr2_5g_firmware qca6390 mdm9628 wcd9340_firmware wcn3660b wsa8815 wcn6850 apq8096au_firmware sd210 sd865_5g_firmware wcn3620_firmware qca6426_firmware wcn3660b_firmware wcn6850_firmware qca6574a_firmware wcn3620 qca6574au_firmware wsa8815_firmware wcn3610_firmware qca6564a qca6391 sdx55m qca6436_firmware wcn3610 Snapdragon qca6564au_firmware wcd9380_firmware msm8996au_firmware sd870_firmware qca6391_firmware sdxr2_5g_firmware wcn6851_firmware sdx55m_firmware mdm9628_firmware wcd9340_firmware apq8096au_firmware sd429_firmware sd205_firmware sdm429w_firmware qca6564a_firmware sd865_5g_firmware wcn3620_firmware qca6426_firmware wsa8810_firmware qualcomm215_firmware wcn3660b_firmware wcn6850_firmware qca6574a_firmware wsa8815_firmware qca6574au_firmware qca6390_firmware wcn3610_firmware sd210_firmware qca6436_firmware

CWE ID-CWE-416

Use After Free

CVE-2022-33298

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-6.7||MEDIUM

EPSS-0.03% / 6.04%

7 Day CHG~0.00%

Published-04 Apr, 2023 | 04:46

Updated-03 Aug, 2024 | 08:01

Use after free in Modem

Memory corruption due to use after free in Modem while modem initialization.

CWE ID-CWE-416

Use After Free

CVE-2022-33292

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.05% / 14.51%

7 Day CHG~0.00%

Published-02 May, 2023 | 05:08

Updated-03 Aug, 2024 | 08:01

Use after free in Qualcomm IPC

Memory corruption in Qualcomm IPC due to use after free while receiving the incoming packet and reposting it.

Product-sm6225 sm6225-ad_firmware wcn3950 wcd9375 wcd9370_firmware sm6225_firmware wcn3988_firmware wcn3950_firmware wcn3988 wsa8810_firmware wsa8810 wcd9375_firmware sm6225-ad sg4150p wcd9370 sg4150p_firmware Snapdragon

CWE ID-CWE-416

Use After Free

CVE-2022-33263

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-6.7||MEDIUM

EPSS-0.03% / 7.59%

7 Day CHG~0.00%

Published-06 Jun, 2023 | 07:38

Updated-07 Jan, 2025 | 19:34

Use after free in Core

Memory corruption due to use after free in Core when multiple DCI clients register and deregister.

Product-wcn3991_firmware qam8255p_firmware wcn3991 wsa8830 wcd9380_firmware sw5100p snapdragon_w5\+_gen_1_wearable_platform wcn785x-5 sm8350-ac_firmware sm8150-ac wsa8835 wcn3950_firmware sd_8_gen1_5g wcd9380 sm4450_firmware qca6420_firmware qca6595au_firmware snapdragon_wear_4100\+_platform_firmware sm8350 wcd9370 snapdragon_wear_4100\+_platform wcn685x-5_firmware wcn685x-1 sm8450 wcn6750 qca6430_firmware wcn3998 wcn3980 wcd9385_firmware wcn3950 sd_8_gen1_5g_firmware wcn3660b sd855 wsa8815 sm4450 wcn3660b_firmware qca6574au_firmware wcn3680b_firmware qca6595au wcn3998_firmware wcn785x-5_firmware wcn3980_firmware wcn3610_firmware qca6420 snapdragon_w5\+_gen_1_wearable_platform_firmware sm8475_firmware aqt1000_firmware wcn6740_firmware sa6155p_firmware qcs8155 wsa8832_firmware qca6698aq sm8350_firmware wcn685x-5 wcn3988_firmware qca6430 qca6797aq_firmware wcn785x-1_firmware qca6574au sa8155p_firmware sa8195p wsa8810_firmware wcd9341_firmware sm8450_firmware sw5100 wsa8810 wsa8832 sa8255p_firmware sa6155p sw5100p_firmware sm8150-ac_firmware qca6698aq_firmware wcn3680b sm8350-ac wcn685x-1_firmware wcd9385 sm8150_firmware sa8255p wcd9341 wcn6740 qca6797aq wcd9370_firmware aqt1000 sa8155p wsa8830_firmware sd855_firmware sm8150 wcn785x-1 wcn3988 wsa8815_firmware wsa8835_firmware sa8195p_firmware qcs8155_firmware sw5100_firmware sm8475 wcn6750_firmware qam8255p wcn3610 Snapdragon

CWE ID-CWE-416

Use After Free

CVE-2022-33245

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-6.7||MEDIUM

EPSS-0.03% / 6.35%

7 Day CHG~0.00%

Published-07 Mar, 2023 | 04:43

Updated-03 Aug, 2024 | 08:01

Use after free in WLAN

Memory corruption in WLAN due to use after free

Product-wcn3991_firmware wsa8830 sa6150p_firmware sa8145p_firmware qcs610 csrb31024 wcd9360_firmware mdm9650 csra6620 wcn3950_firmware sa8150p_firmware sd765g_firmware qca6420_firmware qca6595au_firmware sa6155 sd690_5g wcd9370 csra6620_firmware csra6640_firmware qca6564 wcn3990_firmware sa415m wcn3998 qcn7605 wcd9385_firmware wcn3950 wcn3660b sa8155 qca6320_firmware qca6574au_firmware sdx55_firmware qca6595au sa6155_firmware wcd9375_firmware wcn3998_firmware sm7250p_firmware qca6420 wcd9360 qca6564au_firmware sa6155p_firmware qca6310 sa515m_firmware sd429 sa8155_firmware sa415m_firmware qcs405 qca6430 wcn3988_firmware qcn9074 sa6145p_firmware sd429_firmware wcd9340 sa8195p wsa8810_firmware sd765g sd765_firmware wcn6851 wcd9335 sa6155p wcd9385 wcd9341 qca6696_firmware sd750g wcd9375 sd750g_firmware apq8064au aqt1000 sa8150p wsa8830_firmware sd855_firmware wcn3620_firmware wcn3988 wcn6850_firmware wsa8815_firmware wcn3620 wsa8835_firmware sa8195p_firmware qcn7606_firmware qca6564a wcn3991 wcd9380_firmware wcn3990 sdm429w msm8996au_firmware qca6564au wsa8835 qca6574 msm8996au sdm429w_firmware wcd9380 qcs410 qca6574a sd690_5g_firmware qca6310_firmware qca6430_firmware wcd9335_firmware wcn3980 sa515m qca6574_firmware wcd9340_firmware sd855 wsa8815 wcn6850 qca6320 mdm9650_firmware qca6175a sd765 wcn3660b_firmware qca6574a_firmware sd768g_firmware sd835 wcn3980_firmware aqt1000_firmware apq8064au_firmware ar8031_firmware csrb31024_firmware wcn6851_firmware qca6574au sa8155p_firmware qca6564a_firmware wcd9341_firmware wsa8810 qcn7605_firmware qcs610_firmware sa6145p sd835_firmware qca6564_firmware sd768g apq8096au ar8031 qcs405_firmware sa8145p qca6696 wcd9370_firmware sa6150p sdx55 apq8096au_firmware csra6640 sa8155p sm7250p qcn9074_firmware qcs410_firmware qca6175a_firmware qcn7606 Snapdragon wcn3991_firmware wcd9380_firmware sa6150p_firmware sa8145p_firmware msm8996au_firmware wcd9360_firmware sdm429w_firmware wcn3950_firmware sa8150p_firmware sd765g_firmware qca6420_firmware qca6595au_firmware csra6620_firmware sd690_5g_firmware csra6640_firmware wcn3990_firmware qca6310_firmware qca6430_firmware wcd9335_firmware wcd9385_firmware qca6574_firmware wcd9340_firmware mdm9650_firmware wcn3660b_firmware qca6320_firmware qca6574a_firmware qca6574au_firmware sd768g_firmware sdx55_firmware wcd9375_firmware sa6155_firmware wcn3980_firmware wcn3998_firmware sm7250p_firmware aqt1000_firmware qca6564au_firmware sa6155p_firmware sa515m_firmware ar8031_firmware apq8064au_firmware csrb31024_firmware wcn6851_firmware sa8155_firmware sa415m_firmware wcn3988_firmware sa6145p_firmware sa8155p_firmware sd429_firmware qca6564a_firmware wsa8810_firmware wcd9341_firmware sd765_firmware qcn7605_firmware qcs610_firmware sd835_firmware qca6564_firmware qca6696_firmware qcs405_firmware sd750g_firmware wcd9370_firmware apq8096au_firmware wsa8830_firmware sd855_firmware wcn3620_firmware wsa8815_firmware wcn6850_firmware wsa8835_firmware sa8195p_firmware qcn9074_firmware qcs410_firmware qcn7606_firmware qca6175a_firmware

CWE ID-CWE-416

Use After Free

CVE-2018-11960

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.02% / 4.12%

7 Day CHG~0.00%

Published-20 Dec, 2018 | 15:00

Updated-05 Aug, 2024 | 08:24

In all android releases(Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, A use after free condition can occur in the SPS driver which can lead to error in kernel.

Product-android Android for MSM, Firefox OS for MSM, QRD Android

CWE ID-CWE-416

Use After Free

CVE-2018-11843

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.02% / 2.91%

7 Day CHG~0.00%

Published-18 Sep, 2018 | 18:00

Updated-05 Aug, 2024 | 08:17

In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, lack fo check on return value in WMA response handler can lead to potential use after free.

Product-android Android for MSM, Firefox OS for MSM, QRD Android

CWE ID-CWE-416

Use After Free

CVE-2018-11816

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.02% / 4.47%

7 Day CHG~0.00%

Published-26 Nov, 2024 | 13:56

Updated-06 Feb, 2025 | 16:41

Use After Free in Video

Crafted Binder Request Causes Heap UAF in MediaServer

CWE ID-CWE-416

Use After Free

CVE-2018-11281

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.03% / 5.54%

7 Day CHG~0.00%

Published-18 Sep, 2018 | 18:00

Updated-05 Aug, 2024 | 08:01

In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, while calling IPA_IOC_MDFY_RT_RULE IPA IOCTL, header entry is not checked before use. If IPA_IOC_MDFY_RT_RULE IOCTL called for header entries formerly deleted, a Use after free condition will occur.

Product-android Android for MSM, Firefox OS for MSM, QRD Android

CWE ID-CWE-416

Use After Free

CVE-2022-22068

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-8.4||HIGH

EPSS-0.04% / 9.56%

7 Day CHG~0.00%

Published-14 Jun, 2022 | 09:51

Updated-03 Aug, 2024 | 03:00

kernel event may contain unexpected content which is not generated by NPU software in asynchronous execution mode in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

Product-qca9377_firmware wcn3991_firmware mdm9150_firmware wsa8830 sd678 sm6250p_firmware wcn3998_firmware qcs610 qcs2290_firmware qca8337 wcd9360_firmware sdx65 csra6620 qcs4290 wcn3950_firmware sd765g_firmware qca6420_firmware qca6595au_firmware qcs2290 qca6390_firmware sa6155 sd690_5g sd730_firmware wcd9370 csra6620_firmware sd_675_firmware sd675_firmware csra6640_firmware qca6564 qca6426 wcn3990_firmware qrb5165n_firmware qca9377 sa415m wcn3998 wcd9371_firmware wcd9385_firmware sdxr2_5g_firmware wcn3950 sm4125 sd720g wcd9326_firmware wcn3615_firmware wcn3660b sd662 sd460_firmware sa8155 sm7315_firmware wcn7850 qca6574au_firmware sdx55_firmware wcn3680b_firmware qca6595au qca8081_firmware sa6155_firmware sdx12_firmware sm7250p_firmware wcd9375_firmware wcn3615 qca6420 qca6436_firmware apq8053_firmware qrb5165n wcd9360 qca6564au_firmware sd680_firmware sa6155p_firmware sd778g wcn3999 sa515m_firmware wcn7851 qrb5165_firmware qrb5165m_firmware sdxr2_5g sa8155_firmware sd662_firmware sa415m_firmware qcs405 qca6430 wcn3988_firmware sa6145p_firmware sm6250 sd778g_firmware sa8195p wsa8810_firmware qualcomm215_firmware sd765g sw5100 sd765_firmware qca6436 sd680 wcd9326 sa6155p wcd9335 wcn6851 qca8081 wcn7851_firmware qca6174a_firmware qcs4290_firmware wcd9385 wcd9341 qca6696_firmware wcd9371 sd750g sd870_firmware ar8035 qca6390 sd750g_firmware aqt1000 wcd9375 wcn3910_firmware sm6250_firmware msm8953_firmware wsa8830_firmware sd855_firmware sd660 sd865_5g_firmware wcn3988 sd888_5g_firmware wcn6850_firmware sd660_firmware wcn7850_firmware wsa8815_firmware sa8195p_firmware wsa8835_firmware qca6564a wcn6750_firmware qcm2290_firmware wcn3991 qca8337_firmware wcd9380_firmware wcn3990 sd_675 sw5100p sd780g sd865_5g qca6564au sdx55m_firmware wcn6856_firmware sd888 wsa8835 qca6574 sd665_firmware wcd9380 sd888_5g sm6250p wcn3999_firmware qualcomm215 qcs410 qca6574a sd690_5g_firmware sdx50m_firmware wcn6855_firmware qca6174a sm7325p qca6430_firmware wcd9335_firmware wcn3980 sd439_firmware wcn6750 sa515m qca6574_firmware sd855 sm4125_firmware sm7325p_firmware sd665 wcn3910 wcn6850 wsa8815 sd765 qca6426_firmware wcn3660b_firmware qca6574a_firmware sd695 sd768g_firmware qrb5165m wcn3980_firmware sm7315 sd460 qca6391 sd730 sdx55m aqt1000_firmware wcn6740_firmware msm8953 sdx65_firmware sd678_firmware ar8031_firmware qcm4290 sdx50m qrb5165 sd480_firmware wcn6851_firmware qca6574au sa8155p_firmware qca6564a_firmware wcd9341_firmware qcm4290_firmware sd480 sd870 wcn6855 wsa8810 sw5100p_firmware qcs610_firmware mdm9150 wcn6856 sa6145p wcn3680b qca6564_firmware sd695_firmware sd768g ar8031 qcs405_firmware wcn6740 qca6696 qca6391_firmware sd780g_firmware wcd9370_firmware sdx55 sd888_firmware apq8053 sa8155p csra6640 sd675 sd439 sm7250p sd720g_firmware sdx12 sw5100_firmware qcs410_firmware ar8035_firmware qcm2290 Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

CWE ID-CWE-416

Use After Free

CVE-2018-11305

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.05% / 14.10%

7 Day CHG~0.00%

Published-26 Oct, 2018 | 13:00

Updated-05 Aug, 2024 | 08:01

When a series of FDAL messages are sent to the modem, a Use After Free condition can occur in Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear in version MDM9206, MDM9607, MDM9640, MDM9650, MSM8909W, MSM8996AU, SD 210/SD 212/SD 205, SD 425, SD 430, SD 450, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 820, SD 820A, SD 835, SD 845, SDA660, SDX20.

CWE ID-CWE-416

Use After Free

CVE-2017-9704

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.02% / 2.91%

7 Day CHG~0.00%

Published-20 Dec, 2018 | 15:00

Updated-05 Aug, 2024 | 17:18

In all android releases(Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, There is no synchronization between msm_vb2 buffer operations which can lead to use after free.

Product-android Android for MSM, Firefox OS for MSM, QRD Android

CWE ID-CWE-416

Use After Free

CVE-2019-10603

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.04% / 9.57%

7 Day CHG~0.00%

Published-05 Mar, 2020 | 08:56

Updated-04 Aug, 2024 | 22:24

Use after free issue occurs If the real device interface goes down and a route lookup is performed while sending a raw IPv6 message in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in APQ8053, APQ8096AU, APQ8098, MDM9206, MDM9207C, MDM9607, MDM9640, MDM9650, MSM8917, MSM8937, MSM8996AU, QCN7605, SDA845, SDM630, SDM636, SDM660, SDX20, SXR1130

CWE ID-CWE-416

Use After Free

CVE-2019-10497

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.05% / 14.84%

7 Day CHG~0.00%

Published-30 Sep, 2019 | 15:40

Updated-04 Aug, 2024 | 22:24

Use after free issue occurs If another instance of open for voice_svc node has been called from application without closing the previous one. in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in MDM9150, MDM9206, MDM9607, MDM9640, MDM9650, MSM8909W, MSM8996AU, QCS605, Qualcomm 215, SD 210/SD 212/SD 205, SD 425, SD 427, SD 430, SD 435, SD 439 / SD 429, SD 450, SD 615/16/SD 415, SD 625, SD 632, SD 636, SD 665, SD 675, SD 712 / SD 710 / SD 670, SD 730, SD 820, SD 820A, SD 835, SD 845 / SD 850, SD 855, SDA660, SDM439, SDM630, SDM660, SDX20, SDX24

Product-sd_850 mdm9150_firmware sd_632 mdm9640_firmware sd_820a sd_675 msm8996au_firmware sd_439 sd_670_firmware sd_429 sdx24 sdm439 mdm9650 sd_636 sd_615_firmware msm8909w_firmware msm8996au sd_820 sd_450_firmware sd_845_firmware sd_820a_firmware qcs605_firmware sd_675_firmware mdm9206 sd_425_firmware sd_665 sdx24_firmware sd_625_firmware sd_450 sd_845 mdm9206_firmware qcs605 sd_632_firmware sd_835_firmware mdm9650_firmware sd_835 sda660 sd_210_firmware sd_415_firmware msm8909w sd_665_firmware sd_616_firmware sd_205_firmware sd_415 sd_212 sd_427_firmware sd_712 sd_855 sd_730_firmware qualcomm_215 sdx20 sd_616 sd_425 sdm660 sd_430_firmware mdm9607_firmware sd_435 sd_615 sd_710_firmware sdm630 sd_625 sd_820_firmware sd_210 mdm9607 sd_636_firmware sd_439_firmware qualcomm_215_firmware mdm9150 sd_429_firmware sd_730 sd_212_firmware sd_850_firmware sd_855_firmware sdm439_firmware sd_712_firmware sdm630_firmware sda660_firmware sd_430 sd_427 sd_670 sd_435_firmware sdx20_firmware sd_710 sd_205 sdm660_firmware mdm9640 Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

CWE ID-CWE-416

Use After Free

CVE-2019-10501

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.10% / 28.42%

7 Day CHG~0.00%

Published-30 Sep, 2019 | 15:40

Updated-04 Aug, 2024 | 22:24

Possible use after free issue due to improper input validation in volume listener library in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in MDM9150, MDM9206, MDM9607, MDM9650, MSM8909W, MSM8996AU, QCS405, QCS605, Qualcomm 215, SD 210/SD 212/SD 205, SD 425, SD 427, SD 430, SD 435, SD 439 / SD 429, SD 450, SD 625, SD 632, SD 636, SD 665, SD 675, SD 712 / SD 710 / SD 670, SD 730, SD 820, SD 820A, SD 835, SD 845 / SD 850, SD 855, SDA660, SDM439, SDM630, SDM660, SDX20, SDX24

Product-sd_850 mdm9150_firmware sd_632 sd_820a sd_675 msm8996au_firmware sd_439 sd_670_firmware sd_429 sdx24 sdm439 mdm9650 sd_636 msm8909w_firmware msm8996au sd_820 sd_450_firmware sd_845_firmware sd_820a_firmware qcs605_firmware sd_675_firmware mdm9206 sd_425_firmware sd_665 sdx24_firmware sd_625_firmware sd_450 sd_845 mdm9206_firmware qcs605 sd_632_firmware sd_835_firmware mdm9650_firmware sd_835 sda660 sd_210_firmware msm8909w sd_665_firmware sd_205_firmware sd_212 sd_427_firmware sd_712 sd_855 sd_730_firmware qualcomm_215 sdx20 sd_425 sdm660 sd_430_firmware mdm9607_firmware sd_435 sd_710_firmware sdm630 qcs405 sd_625 sd_820_firmware sd_210 mdm9607 sd_636_firmware sd_439_firmware qualcomm_215_firmware mdm9150 sd_429_firmware sd_730 sd_212_firmware sd_850_firmware sdm439_firmware qcs405_firmware sd_712_firmware sdm630_firmware sda660_firmware sd_430 sd_427 sd_670 sd_435_firmware sdx20_firmware sd_710 sd_205 sdm660_firmware sd_855_firmware Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

CWE ID-CWE-416

Use After Free

CWE ID-CWE-20

Improper Input Validation

CVE-2019-10524

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.05% / 14.84%

7 Day CHG~0.00%

Published-06 Nov, 2019 | 17:11

Updated-04 Aug, 2024 | 22:24

Lack of check for a negative value returned for get_clk is wrongly interpreted as valid pointer and lead to use after free in clk driver in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in MDM9150, MDM9206, MDM9607, MDM9640, MDM9650, MSM8909W, MSM8996AU, QCS405, QCS605, Qualcomm 215, SD 210/SD 212/SD 205, SD 425, SD 427, SD 430, SD 435, SD 439 / SD 429, SD 450, SD 625, SD 632, SD 636, SD 665, SD 675, SD 712 / SD 710 / SD 670, SD 730, SD 820, SD 820A, SD 835, SD 845 / SD 850, SD 855, SDA660, SDM439, SDM630, SDM660, SDX20, SDX24

Product-sd_850 mdm9150_firmware sd_632 mdm9640_firmware sd_820a sd_675 msm8996au_firmware sd_439 sd_670_firmware sd_429 sdx24 sdm439 mdm9650 sd_636 msm8909w_firmware msm8996au sd_820 sd_450_firmware sd_845_firmware sd_820a_firmware qcs605_firmware sd_675_firmware mdm9206 sd_425_firmware sd_665 sdx24_firmware sd_625_firmware sd_450 sd_845 mdm9206_firmware qcs605 sd_632_firmware sd_835_firmware mdm9650_firmware sd_835 sda660 sd_210_firmware msm8909w sd_665_firmware sd_205_firmware sd_212 sd_427_firmware sd_712 sd_855 sd_730_firmware qualcomm_215 sdx20 sd_425 sdm660 sd_430_firmware mdm9607_firmware sd_435 sd_710_firmware sdm630 qcs405 sd_625 sd_820_firmware sd_210 mdm9607 sd_636_firmware sd_439_firmware qualcomm_215_firmware mdm9150 sd_429_firmware sd_730 sd_212_firmware sd_850_firmware sd_855_firmware sdm439_firmware qcs405_firmware sd_712_firmware sdm630_firmware sda660_firmware sd_430 sd_427 sd_670 sd_435_firmware sdx20_firmware sd_710 sd_205 sdm660_firmware mdm9640 Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

CWE ID-CWE-416

Use After Free

CVE-2019-10621

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.04% / 12.54%

7 Day CHG~0.00%

Published-16 Apr, 2020 | 10:46

Updated-04 Aug, 2024 | 22:31

Use after free issue when MAP and UNMAP calls at same time as data structure used my MAP may be freed by UNMAP function in Snapdragon Auto, Snapdragon Compute, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music in Nicobar, QCS405, Rennell, Saipan, SC8180X, SDX55, SM6150, SM7150, SM8150, SM8250, SXR2130

CWE ID-CWE-416

Use After Free

CVE-2020-11295

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-6.8||MEDIUM

EPSS-0.04% / 12.54%

7 Day CHG~0.00%

Published-07 May, 2021 | 09:10

Updated-04 Aug, 2024 | 11:28

Use after free in camera If the threadmanager is being cleaned up while the worker thread is processing objects in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile