VDB

CVE-2018-13899

CVE-2018-13899 PUBLISHED CVSS 7.199999809265137 HIGH

Processing messages after error may result in user after free memory fault in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables in MDM9150, MDM9206, MDM9607, MDM9650, MSM8909W, QCS605, Qualcomm 215, SD 425, SD 439 / SD 429, SD 450, SD 625, SD 632, SD 636, SD 675, SD 712 / SD 710 / SD 670, SD 820, SD 820A, SD 845 / SD 850, SD 855, SDA660, SDM439, SDM630, SDM660, SDX20, SDX24, SM7150

EPSS 0.03% · 10.9th percentile

Risk Scores

CVSS 2.0
7.199999809265137
EPSS Score
0.03%
10.9th percentile

Affected Products

VendorProductVersions
qualcommsdx24_firmware
qualcommsd_850_firmware
qualcommsd_710_firmware
qualcommsd_439_firmware
qualcommsd_450_firmware
qualcommsd_625_firmware
qualcommmsm8909w_firmware
qualcommsdm630_firmware
qualcommqcs605_firmware
qualcommsm7150_firmware
qualcommsd_429_firmware
qualcommsdx20_firmware
qualcommmdm9607_firmware
qualcommsd_670_firmware
qualcommsdm660_firmware
Qualcomm, Inc.Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon WearablesMDM9150, MDM9206, MDM9607, MDM9650, MSM8909W, QCS605, Qualcomm 215, SD 425, SD 439 / SD 429, SD 450, SD 625, SD 632, SD 636, SD 675, SD 712 / SD 710 / SD 670, SD 820, SD 820A, SD 845 / SD 850, SD 855, SDA660, SDM439, SDM630, SDM660, SDX20, SDX24, SM7150
qualcommsdm439_firmware
qualcommmdm9206_firmware
qualcommsd_845_firmware
qualcommsd_675_firmware

…and 11 more

Timeline

  • Mar 5, 2019 CVE Published
  • May 24, 2019 PoC Published
  • Apr 14, 2021 EPSS Score
  • Jun 23, 2021 EPSS Score
  • Aug 24, 2021 EPSS Score
  • Oct 26, 2021 EPSS Score
  • Dec 27, 2021 EPSS Score
  • Feb 28, 2022 EPSS Score
  • May 2, 2022 EPSS Score
  • Jul 3, 2022 EPSS Score
  • Sep 5, 2022 EPSS Score
  • Nov 6, 2022 EPSS Score
Open in Interactive Console →
$ Console Community · 100/wk Open console ›