EUVD-2019-2298 · Published Dec 12, 2019
Race condition between the camera functions due to lack of resource lock which will lead to memory corruption and UAF issue in Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in APQ8009, APQ8017, APQ8053, APQ8096AU, APQ8098, MDM9206, MDM9207C, MDM9607, MDM9640, MDM9650, MSM8909, MSM8909W, MSM8917, MSM8920, MSM8937, MSM8940, MSM8953, MSM8996AU, MSM8998, Nicobar, QCN7605, QCS405, QCS605, QM215, SDA660, SDA845, SDM429, SDM439, SDM450, SDM630, SDM632, SDM636, SDM660, SDM670, SDM710, SDM845, SDX20, SDX24, SM6150, SM7150, SM8150
Technologies
Qualcomm Msm8953 FirmwareQualcomm Apq8098 FirmwareQualcomm Sdm636Qualcomm Sm7150Qualcomm Mdm9207CQualcomm Sdx24 FirmwareQualcomm Msm8920Qualcomm Qcs605 FirmwareQualcomm Mdm9650Qualcomm Msm8940 FirmwareQualcomm Sda660Qualcomm Qm215 FirmwareQualcomm Apq8009Qualcomm Qcs605Qualcomm Sdm439 FirmwareQualcomm Mdm9607 FirmwareQualcomm Apq8096Au FirmwareQualcomm Apq8098Qualcomm Sdm630Qualcomm Msm8909 FirmwareQualcomm Msm8998 FirmwareQualcomm Qcn7605Qualcomm Sdm670Qualcomm Sdm845 FirmwareQualcomm Sdm636 FirmwareQualcomm Sdx24Qualcomm Msm8940Qualcomm Sdm439Qualcomm Apq8017 FirmwareQualcomm Mdm9650 FirmwareQualcomm Apq8053Qualcomm Mdm9607Qualcomm Qcs405 FirmwareQualcomm Apq8096AuQualcomm Mdm9640Qualcomm Msm8909WQualcomm Sm8150Qualcomm Nicobar FirmwareQualcomm Sda845Qualcomm Sdm429 FirmwareQualcomm Apq8017Qualcomm Msm8917 FirmwareQualcomm NicobarQualcomm Sda845 FirmwareQualcomm Qm215Qualcomm Sdm630 FirmwareQualcomm Mdm9206 FirmwareQualcomm Mdm9206Qualcomm Apq8053 FirmwareQualcomm Sm8150 FirmwareQualcomm Sda660 FirmwareQualcomm Msm8909Qualcomm Msm8996Au FirmwareQualcomm Mdm9207C FirmwareQualcomm Msm8920 FirmwareQualcomm Msm8998Qualcomm Msm8953Qualcomm Sdm845Qualcomm Qcs405Qualcomm Apq8009 FirmwareQualcomm Sdx20 FirmwareQualcomm Msm8937Qualcomm Msm8996AuQualcomm Sdm710 FirmwareQualcomm Msm8909W FirmwareQualcomm Sdm710Qualcomm Sm6150 FirmwareQualcomm Sdm450 FirmwareQualcomm Sdm670 FirmwareQualcomm Sdm660 FirmwareQualcomm Sdx20Qualcomm Qcn7605 FirmwareQualcomm Sdm429Qualcomm Sm6150Qualcomm Mdm9640 FirmwareQualcomm Msm8937 FirmwareQualcomm Sm7150 FirmwareQualcomm Sdm632 FirmwareQualcomm Sdm450Qualcomm Sdm632Qualcomm Msm8917Qualcomm Sdm660
Weaknesses
CWE-367CWE-416CWE-787CWE-667
CVSS scores
- v3.18.1
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H - v2.04.4
AV:L/AC:M/Au:N/C:P/I:P/A:P
MITRE ATT&CK
Inferred Where this vulnerability fits in an attack
Initial Access Impact
Potentially impacted assets
See if this affects your attack surface
