Vulnerabilities > CVE-2020-3642 - Use After Free vulnerability in Qualcomm products

CVSS 4.6 - MEDIUM

Attack vector

LOCAL

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

PARTIAL

Integrity impact

PARTIAL

Availability impact

PARTIAL

local

low complexity

qualcomm

CWE-416

NVD

Published: 2020-06-22

Updated: 2020-06-25

Summary

Use after free issue in camera applications when used randomly over multiple operations due to pointer not set to NULL after free/destroy of the object in Snapdragon Consumer IOT, Snapdragon Mobile in Kamorta, QCS605, Rennell, Saipan, SDM670, SDM710, SDM845, SM6150, SM7150, SM8150, SM8250, SXR1130, SXR2130

Vulnerable Configurations

Part	Description	Count
OS	Qualcomm Qualcomm Kamorta Firmware - Qualcomm Qcs605 Firmware - Qualcomm Rennell Firmware - Qualcomm Saipan Firmware - Qualcomm Sdm670 Firmware - Qualcomm Sdm710 Firmware - Qualcomm Sdm845 Firmware - Qualcomm Sm6150 Firmware - Qualcomm Sm7150 Firmware - Qualcomm Sm8150 Firmware - Qualcomm Sm8250 Firmware - Qualcomm Sxr1130 Firmware - Qualcomm Sxr2130 Firmware -	13
Hardware	Qualcomm Qualcomm Kamorta - Qualcomm Qcs605 - Qualcomm Rennell - Qualcomm Saipan - Qualcomm Sdm670 - Qualcomm Sdm710 - Qualcomm Sdm845 - Qualcomm Sm6150 - Qualcomm Sm7150 - Qualcomm Sm8150 - Qualcomm Sm8250 - Qualcomm Sxr1130 - Qualcomm Sxr2130 -	13

Common Weakness Enumeration (CWE)

CWE-416 - Use After Free

Summary

Vulnerable Configurations

Common Weakness Enumeration (CWE)

References