CVE-2020-3610
—CVSS 3.1
7.8 high
EPSS
<1%p9
Published
()
Modified
Description
Possibility of double free of the drawobj that is added to the drawqueue array of the context during IOCTL commands as there is no refcount taken for this object in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in APQ8009, APQ8053, APQ8096AU, APQ8098, MSM8909W, MSM8917, MSM8953, MSM8996AU, Nicobar, QCS405, QCS605, QM215, Rennell, SA415M, Saipan, SC8180X, SDA660, SDA845, SDM429, SDM429W, SDM439, SDM450, SDM630, SDM632, SDM636, SDM660, SDM670, SDM710, SDM845, SDX20, SDX24, SDX55, SM6150, SM7150, SM8150, SM8250, SXR2130
- Vendors
- qualcomm
- Products
- apq8009 firmware, apq8053 firmware, apq8096au firmware, apq8098 firmware, msm8909w firmware, msm8917 firmware, msm8953 firmware, msm8996au firmware, nicobar firmware, qcs405 firmware, qcs605 firmware, qm215 firmware
- Weakness
- CWE-415
- Vector
- CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
In the news0 stories
No ingested article mentions this CVE yet.