PT-2020-9482 · Qualcomm · Sda660+45
Published
2020-02-07
·
Updated
2020-08-24
·
CVE-2019-14055
CVSS v2.0
7.2
High
| Vector | AV:L/AC:L/Au:N/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions:
Qualcomm Snapdragon versions (affected versions not specified)
Description:
The issue is related to the possibility of use-after-free and double free due to not marking a buffer as NULL after freeing, which can lead to dangling pointer access. This affects various Qualcomm Snapdragon products, including Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, and Snapdragon Wearables, in multiple chipsets such as APQ8009, APQ8017, APQ8053, APQ8096AU, APQ8098, MDM9206, MDM9207C, MDM9607, MDM9640, MDM9650, MSM8905, MSM8909W, MSM8939, MSM8953, MSM8996AU, MSM8998, Nicobar, QCN7605, QCS605, SC8180X, SDA660, SDA845, SDM429, SDM429W, SDM439, SDM450, SDM630, SDM632, SDM636, SDM660, SDM845, SDX20, SDX24, SDX55, SM8150, SM8250, SXR1130, SXR2130.
Recommendations:
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Double Free
Use After Free
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Apq8009
Apq8017
Apq8053
Apq8096Au
Apq8098
Mdm9206
Mdm9207C
Mdm9607
Mdm9640
Mdm9650
Msm8905
Msm8909W
Msm8939
Msm8953
Msm8996Au
Msm8998
Nicobar
Qcn7605
Qcs605
Sc8180X
Sda660
Sda845
Sdm429
Sdm439
Sdm450
Sdm630
Sdm632
Sdm636
Sdm660
Sdm845
Sdx20
Sdx24
Sdx55
Sm8150
Sm8250
Sxr1130
Sxr2130
Snapdragon Auto
Snapdragon Compute
Snapdragon Consumer Electronics Connectivity
Snapdragon Consumer Iot
Snapdragon Industrial Iot
Snapdragon Iot
Snapdragon Mobile
Snapdragon Voice & Music
Snapdragon Wearables