Vulnerabilities > CVE-2014-10046 - Use After Free vulnerability in Qualcomm products

CVSS 10.0 - CRITICAL

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

COMPLETE

Integrity impact

COMPLETE

Availability impact

COMPLETE

network

low complexity

qualcomm

CWE-416

critical

NVD

Published: 2018-04-18

Updated: 2018-05-09

Summary

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile MDM9615, MDM9625, MDM9635M, SD 210/SD 212/SD 205, SD 400, SD 410/12, SD 615/16/SD 415, SD 800, SD 808, and SD 810, use after free vulnerability when the PDN throttle info block is freed without clearing the corresponding active timer.

Vulnerable Configurations

Part	Description	Count
OS	Qualcomm Qualcomm Mdm9615 Firmware - Qualcomm Mdm9625 Firmware - Qualcomm Mdm9635M Firmware - Qualcomm SD 210 Firmware - Qualcomm SD 212 Firmware - Qualcomm SD 205 Firmware - Qualcomm SD 400 Firmware - Qualcomm SD 410 Firmware - Qualcomm SD 412 Firmware - Qualcomm SD 615 Firmware - Qualcomm SD 616 Firmware - Qualcomm SD 415 Firmware - Qualcomm SD 800 Firmware - Qualcomm SD 808 Firmware - Qualcomm SD 810 Firmware -	15
Hardware	Qualcomm Qualcomm Mdm9615 - Qualcomm Mdm9625 - Qualcomm Mdm9635M - Qualcomm SD 210 - Qualcomm SD 212 - Qualcomm SD 205 - Qualcomm SD 400 - Qualcomm SD 410 - Qualcomm SD 412 - Qualcomm SD 615 - Qualcomm SD 616 - Qualcomm SD 415 - Qualcomm SD 800 - Qualcomm SD 808 - Qualcomm SD 810 -	15

Common Weakness Enumeration (CWE)

CWE-416 - Use After Free

Summary

Vulnerable Configurations

Common Weakness Enumeration (CWE)

References