Vulnetix
Try Vulnetix Request Demo
CVE-2018-13905 PUBLISHED CVSS 7.800000190734863 HIGH

KGSL syncsource lock not handled properly during syncsource cleanup can lead to use after free issue in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables in MDM9206, MDM9607, MDM9650, MSM8909W, QCS605, SD 210/SD 212/SD 205, SD 439 / SD 429, SD 712 / SD 710 / SD 670, SD 820A, SD 845 / SD 850, SD 855, SDM439, SDM660, SDX24.

EPSS 0.05% · 15.8th percentile

Risk Scores

CVSS v3.0
7.800000190734863
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS Score
0.05%
15.8th percentile

Affected Products

VendorProductVersions
qualcommmdm9206_firmware
qualcommsd_855_firmware
qualcommsd_710_firmware
qualcommmsm8909w_firmware
qualcommsdm439_firmware
qualcommsdm660_firmware
qualcommmdm9650_firmware
qualcommsd_429_firmware
qualcommsd_820a_firmware
Qualcomm, Inc.Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon WearablesMDM9206, MDM9607, MDM9650, MSM8909W, QCS605, SD 210/SD 212/SD 205, SD 439 / SD 429, SD 712 / SD 710 / SD 670, SD 820A, SD 845 / SD 850, SD 855, SDM439, SDM660, SDX24
qualcommsd_439_firmware
qualcommsd_205_firmware
qualcommsd_712_firmware
qualcommsd_845_firmware
qualcommsd_212_firmware
qualcommmdm9607_firmware
qualcommsd_850_firmware
qualcommsdx24_firmware
qualcommsd_670_firmware
qualcommsd_210_firmware

…and 1 more

Timeline

References

Open in Interactive Console →