CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:L/AC:L/Au:N/C:P/I:P/A:P
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
AI Score
Confidence
High
EPSS
Percentile
12.6%
Using memory after being freed in qsee due to wrong implementation can lead to unexpected behavior such as execution of unknown code in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in APQ8009, APQ8017, APQ8053, APQ8096AU, APQ8098, MDM9150, MDM9206, MDM9207C, MDM9607, MDM9640, MDM9650, MSM8905, MSM8909W, MSM8917, MSM8920, MSM8937, MSM8940, MSM8953, MSM8996AU, MSM8998, QCS605, QM215, SDA660, SDA845, SDM429, SDM429W, SDM439, SDM450, SDM630, SDM632, SDM636, SDM660, SDM845, SDX20, SDX24, SM8150, SXR1130
Vendor | Product | Version | CPE |
---|---|---|---|
qualcomm | apq8009 | - | cpe:2.3:h:qualcomm:apq8009:-:*:*:*:*:*:*:* |
qualcomm | apq8009_firmware | - | cpe:2.3:o:qualcomm:apq8009_firmware:-:*:*:*:*:*:*:* |
qualcomm | apq8017 | - | cpe:2.3:h:qualcomm:apq8017:-:*:*:*:*:*:*:* |
qualcomm | apq8017_firmware | - | cpe:2.3:o:qualcomm:apq8017_firmware:-:*:*:*:*:*:*:* |
qualcomm | apq8053 | - | cpe:2.3:h:qualcomm:apq8053:-:*:*:*:*:*:*:* |
qualcomm | apq8053_firmware | - | cpe:2.3:o:qualcomm:apq8053_firmware:-:*:*:*:*:*:*:* |
qualcomm | apq8096au | - | cpe:2.3:h:qualcomm:apq8096au:-:*:*:*:*:*:*:* |
qualcomm | apq8096au_firmware | - | cpe:2.3:o:qualcomm:apq8096au_firmware:-:*:*:*:*:*:*:* |
qualcomm | apq8098 | - | cpe:2.3:h:qualcomm:apq8098:-:*:*:*:*:*:*:* |
qualcomm | apq8098_firmware | - | cpe:2.3:o:qualcomm:apq8098_firmware:-:*:*:*:*:*:*:* |
[
{
"product": "Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables",
"vendor": "Qualcomm, Inc.",
"versions": [
{
"status": "affected",
"version": "APQ8009, APQ8017, APQ8053, APQ8096AU, APQ8098, MDM9150, MDM9206, MDM9207C, MDM9607, MDM9640, MDM9650, MSM8905, MSM8909W, MSM8917, MSM8920, MSM8937, MSM8940, MSM8953, MSM8996AU, MSM8998, QCS605, QM215, SDA660, SDA845, SDM429, SDM429W, SDM439, SDM450, SDM630, SDM632, SDM636, SDM660, SDM845, SDX20, SDX24, SM8150, SXR1130"
}
]
}
]
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:L/AC:L/Au:N/C:P/I:P/A:P
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
AI Score
Confidence
High
EPSS
Percentile
12.6%