VDB

CVE-2018-13905

CVE-2018-13905 PUBLISHED CVSS 7.800000190734863 HIGH

KGSL syncsource lock not handled properly during syncsource cleanup can lead to use after free issue in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables in MDM9206, MDM9607, MDM9650, MSM8909W, QCS605, SD 210/SD 212/SD 205, SD 439 / SD 429, SD 712 / SD 710 / SD 670, SD 820A, SD 845 / SD 850, SD 855, SDM439, SDM660, SDX24.

EPSS 0.05% · 16.3th percentile

Risk Scores

CVSS 3.0
7.800000190734863
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS Score
0.05%
16.3th percentile

Affected Products

VendorProductVersions
qualcommmdm9206_firmware
qualcommsd_855_firmware
qualcommsd_710_firmware
qualcommmsm8909w_firmware
qualcommsdm439_firmware
qualcommsdm660_firmware
qualcommmdm9650_firmware
qualcommsd_429_firmware
qualcommsd_820a_firmware
Qualcomm, Inc.Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon WearablesMDM9206, MDM9607, MDM9650, MSM8909W, QCS605, SD 210/SD 212/SD 205, SD 439 / SD 429, SD 712 / SD 710 / SD 670, SD 820A, SD 845 / SD 850, SD 855, SDM439, SDM660, SDX24
qualcommsd_439_firmware
qualcommsd_205_firmware
qualcommsd_712_firmware
qualcommsd_845_firmware
qualcommsd_212_firmware
qualcommmdm9607_firmware
qualcommsd_850_firmware
qualcommsdx24_firmware
qualcommsd_670_firmware
qualcommsd_210_firmware

…and 1 more

Timeline

  • Feb 5, 2019 CVE Published
  • Apr 14, 2021 EPSS Score
  • Jun 23, 2021 EPSS Score
  • Aug 24, 2021 EPSS Score
  • Oct 26, 2021 EPSS Score
  • Dec 27, 2021 EPSS Score
  • Feb 28, 2022 EPSS Score
  • May 2, 2022 EPSS Score
  • Jul 3, 2022 EPSS Score
  • Sep 5, 2022 EPSS Score
  • Nov 6, 2022 EPSS Score
  • Jan 8, 2023 EPSS Score
Open in Interactive Console →
$ Console Community · 100/wk Open console ›