Description (CNA)
Possible use after free issue while CRM is accessing the link pointer from device private data due to lack of resource protection in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in APQ8009, MDM9206, MDM9207C, MDM9607, QCS605, SDM429W, SDX24, SM8150, SXR1130
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Qualcomm, Inc. / Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables | affected APQ8009, MDM9206, MDM9207C, MDM9607, QCS605, SDM429W, SDX24, SM8150, SXR1130 |
CWE
No CWE identifiers supplied.
References
- https://www.qualcomm.com/company/product-security/bulletins/february-2020-bulletin
- https://www.zerodayinitiative.com/advisories/ZDI-20-199/
ADP enrichment
No English description supplied.