CVSS2
Attack Vector
LOCAL
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:L/AC:M/Au:N/C:P/I:P/A:P
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
AI Score
Confidence
High
EPSS
Percentile
12.6%
A race condition in fastrpc kernel driver for dynamic process creation can lead to use after free scenario in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Mobile, Snapdragon Wearables
Vendor | Product | Version | CPE |
---|---|---|---|
qualcomm | qca6574a_firmware | - | cpe:2.3:o:qualcomm:qca6574a_firmware:-:*:*:*:*:*:*:* |
qualcomm | qca6574a | - | cpe:2.3:h:qualcomm:qca6574a:-:*:*:*:*:*:*:* |
qualcomm | qca6574au_firmware | - | cpe:2.3:o:qualcomm:qca6574au_firmware:-:*:*:*:*:*:*:* |
qualcomm | qca6574au | - | cpe:2.3:h:qualcomm:qca6574au:-:*:*:*:*:*:*:* |
qualcomm | qca6595_firmware | - | cpe:2.3:o:qualcomm:qca6595_firmware:-:*:*:*:*:*:*:* |
qualcomm | qca6595 | - | cpe:2.3:h:qualcomm:qca6595:-:*:*:*:*:*:*:* |
qualcomm | qca6595au_firmware | - | cpe:2.3:o:qualcomm:qca6595au_firmware:-:*:*:*:*:*:*:* |
qualcomm | qca6595au | - | cpe:2.3:h:qualcomm:qca6595au:-:*:*:*:*:*:*:* |
qualcomm | qca6696_firmware | - | cpe:2.3:o:qualcomm:qca6696_firmware:-:*:*:*:*:*:*:* |
qualcomm | qca6696 | - | cpe:2.3:h:qualcomm:qca6696:-:*:*:*:*:*:*:* |
[
{
"product": "Snapdragon Auto, Snapdragon Connectivity, Snapdragon Mobile, Snapdragon Wearables",
"vendor": "Qualcomm, Inc.",
"versions": [
{
"status": "affected",
"version": "QCA6574A, QCA6574AU, QCA6595, QCA6595AU, QCA6696, SA6145P, SA6150P, SA6155P, SA8145P, SA8150P, SA8155, SA8155P, SA8195P, SD480, SD778G, SD780G, SD888 5G, SDA429W, SM7315, SM7325P, WCD9341, WCD9370, WCD9375, WCD9380, WCD9385, WCN3610, WCN3620, WCN3660B, WCN3980, WCN3988, WCN3991, WCN6740, WCN6750, WCN6850, WCN6851, WCN6855, WCN6856, WSA8830, WSA8835"
}
]
}
]
CVSS2
Attack Vector
LOCAL
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:L/AC:M/Au:N/C:P/I:P/A:P
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
AI Score
Confidence
High
EPSS
Percentile
12.6%