Description

Use after free can occur due to improper handling of response from firmware in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

Related CPE's

o

qualcomm

aqt1000_firmware

-

Vulnerable

h

qualcomm

aqt1000

-

o

qualcomm

ar8031_firmware

-

Vulnerable

h

qualcomm

ar8031

-

o

qualcomm

ar8035_firmware

-

Vulnerable

h

qualcomm

ar8035

-

o

qualcomm

csra6620_firmware

-

Vulnerable

h

qualcomm

csra6620

-

o

qualcomm

csra6640_firmware

-

Vulnerable

h

qualcomm

csra6640

-

o

qualcomm

fsm10055_firmware

-

Vulnerable

h

qualcomm

fsm10055

-

o

qualcomm

fsm10056_firmware

-

Vulnerable

h

qualcomm

fsm10056

-

o

qualcomm

qca6391_firmware

-

Vulnerable

h

qualcomm

qca6391

-

o

qualcomm

qca6420_firmware

-

Vulnerable

h

qualcomm

qca6420

-

o

qualcomm

qca6430_firmware

-

Vulnerable

h

qualcomm

qca6430

-

o

qualcomm

qca6564_firmware

-

Vulnerable

h

qualcomm

qca6564

-

o

qualcomm

qca6564a_firmware

-

Vulnerable

h

qualcomm

qca6564a

-

o

qualcomm

qca6564au_firmware

-

Vulnerable

h

qualcomm

qca6564au

-

o

qualcomm

qca6574_firmware

-

Vulnerable

h

qualcomm

qca6574

-

o

qualcomm

qca6574a_firmware

-

Vulnerable

h

qualcomm

qca6574a

-

o

qualcomm

qca6574au_firmware

-

Vulnerable

h

qualcomm

qca6574au

-

o

qualcomm

qca6584au_firmware

-

Vulnerable

h

qualcomm

qca6584au

-

o

qualcomm

qca6595au_firmware

-

Vulnerable

h

qualcomm

qca6595au

-

o

qualcomm

qca6696_firmware

-

Vulnerable

h

qualcomm

qca6696

-

o

qualcomm

qca8337_firmware

-

Vulnerable

h

qualcomm

qca8337

-

o

qualcomm

qcm6125_firmware

-

Vulnerable

h

qualcomm

qcm6125

-

o

qualcomm

qcs405_firmware

-

Vulnerable

h

qualcomm

qcs405

-

o

qualcomm

qcs410_firmware

-

Vulnerable

h

qualcomm

qcs410

-

o

qualcomm

qcs610_firmware

-

Vulnerable

h

qualcomm

qcs610

-

o

qualcomm

qcs6125_firmware

-

Vulnerable

h

qualcomm

qcs6125

-

o

qualcomm

sa415m_firmware

-

Vulnerable

h

qualcomm

sa415m

-

o

qualcomm

sa515m_firmware

-

Vulnerable

h

qualcomm

sa515m

-

o

qualcomm

sa6145p_firmware

-

Vulnerable

h

qualcomm

sa6145p

-

o

qualcomm

sa6155_firmware

-

Vulnerable

h

qualcomm

sa6155

-

o

qualcomm

sa6155p_firmware

-

Vulnerable

h

qualcomm

sa6155p

-

o

qualcomm

sa8155_firmware

-

Vulnerable

h

qualcomm

sa8155

-

o

qualcomm

sa8155p_firmware

-

Vulnerable

h

qualcomm

sa8155p

-

o

qualcomm

sa8195p_firmware

-

Vulnerable

h

qualcomm

sa8195p

-

o

qualcomm

sd_675_firmware

-

Vulnerable

h

qualcomm

sd_675

-

o

qualcomm

sd_8c_firmware

-

Vulnerable

h

qualcomm

sd_8c

-

o

qualcomm

sd_8cx_firmware

-

Vulnerable

h

qualcomm

sd_8cx

-

o

qualcomm

sd660_firmware

-

Vulnerable

h

qualcomm

sd660

-

o

qualcomm

sd665_firmware

-

Vulnerable

h

qualcomm

sd665

-

o

qualcomm

sd675_firmware

-

Vulnerable

h

qualcomm

sd675

-

o

qualcomm

sd678_firmware

-

Vulnerable

h

qualcomm

sd678

-

o

qualcomm

sd720g_firmware

-

Vulnerable

h

qualcomm

sd720g

-

o

qualcomm

sd730_firmware

-

Vulnerable

h

qualcomm

sd730

-

o

qualcomm

sd855_firmware

-

Vulnerable

h

qualcomm

sd855

-

o

qualcomm

sda429w_firmware

-

Vulnerable

h

qualcomm

sda429w

-

o

qualcomm

sdx50m_firmware

-

Vulnerable

h

qualcomm

sdx50m

-

o

qualcomm

sdx55_firmware

-

Vulnerable

h

qualcomm

sdx55

-

o

qualcomm

sdx55m_firmware

-

Vulnerable

h

qualcomm

sdx55m

-

o

qualcomm

sm6250_firmware

-

Vulnerable

h

qualcomm

sm6250

-

o

qualcomm

sm6250p_firmware

-

Vulnerable

h

qualcomm

sm6250p

-

o

qualcomm

wcd9335_firmware

-

Vulnerable

h

qualcomm

wcd9335

-

o

qualcomm

wcd9340_firmware

-

Vulnerable

h

qualcomm

wcd9340

-

o

qualcomm

wcd9341_firmware

-

Vulnerable

h

qualcomm

wcd9341

-

o

qualcomm

wcd9370_firmware

-

Vulnerable

h

qualcomm

wcd9370

-

o

qualcomm

wcd9375_firmware

-

Vulnerable

h

qualcomm

wcd9375

-

o

qualcomm

wcd9380_firmware

-

Vulnerable

h

qualcomm

wcd9380

-

o

qualcomm

wcn3610_firmware

-

Vulnerable

h

qualcomm

wcn3610

-

o

qualcomm

wcn3620_firmware

-

Vulnerable

h

qualcomm

wcn3620

-

o

qualcomm

wcn3660b_firmware

-

Vulnerable

h

qualcomm

wcn3660b

-

o

qualcomm

wcn3950_firmware

-

Vulnerable

h

qualcomm

wcn3950

-

o

qualcomm

wcn3980_firmware

-

Vulnerable

h

qualcomm

wcn3980

-

o

qualcomm

wcn3988_firmware

-

Vulnerable

h

qualcomm

wcn3988

-

o

qualcomm

wcn3990_firmware

-

Vulnerable

h

qualcomm

wcn3990

-

o

qualcomm

wcn3991_firmware

-

Vulnerable

h

qualcomm

wcn3991

-

o

qualcomm

wcn3998_firmware

-

Vulnerable

h

qualcomm

wcn3998

-

o

qualcomm

wcn3999_firmware

-

Vulnerable

h

qualcomm

wcn3999

-

o

qualcomm

wsa8810_firmware

-

Vulnerable

h

qualcomm

wsa8810

-

o

qualcomm

wsa8815_firmware

-

Vulnerable

h

qualcomm

wsa8815

-

References

http://packetstormsecurity.com/files/172856/Qualcomm-NPU-Use-After-Free-Information-Leak.html

https://www.qualcomm.com/company/product-security/bulletins/july-2021-bulletin

PatchVendor Advisory

Weaknesses

[email protected]

Primary
CWE-416

CVSS impact metrics

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

7.8 · High

  • CVSS V3.1

  • CVSS V3.0

  • CVSS V2.0

Information

Source identifier

[email protected]

Vulnerability status

Modified

Published

2021-07-13T06:15:08.797

3 years ago

Last modified

2023-06-12T07:15:17.517

2 years ago