CVE-2018-11947: Double Free
The txrx stats req might be double freed in the pdev detach when the host driver is unloading in Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking in IPQ8064, MDM9150, MDM9206, MDM9607, MDM9640, MDM9650, MSM8996AU, QCA6174A, QCA6574AU, QCA9377, QCA9379, QCA9558, QCA9880, QCA9886, QCA9980, QCS405, QCS605, SD 210/SD 212/SD 205, SD 425, SD 427, SD 430, SD 435, SD 450, SD 625, SD 636, SD 675, SD 712 / SD 710 / SD 670, SD 730, SD 820A, SD 835, SD 845 / SD 850, SD 855, SDA660, SDM630, SDM660, SDX20, SDX24
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2018-11947?
CVE-2018-11947 is considered to have a high severity due to potential memory corruption that could lead to denial of service or arbitrary code execution.
How do I fix CVE-2018-11947?
To fix CVE-2018-11947, you should update the affected Qualcomm firmware to the latest version provided by Qualcomm.
What devices are affected by CVE-2018-11947?
CVE-2018-11947 affects multiple Qualcomm devices including those in the Snapdragon family, such as IPQ8064 and MDM series.
Can CVE-2018-11947 be exploited remotely?
Yes, CVE-2018-11947 can potentially be exploited remotely, allowing an attacker to execute malicious code.
Is there a workaround for CVE-2018-11947?
There are no known effective workarounds for CVE-2018-11947 aside from applying the software updates provided by Qualcomm.