CVE-2018-13905: Use After Free
KGSL syncsource lock not handled properly during syncsource cleanup can lead to use after free issue in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables in MDM9206, MDM9607, MDM9650, MSM8909W, QCS605, SD 210/SD 212/SD 205, SD 439 / SD 429, SD 712 / SD 710 / SD 670, SD 820A, SD 845 / SD 850, SD 855, SDM439, SDM660, SDX24.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2018-13905?
CVE-2018-13905 has a medium severity rating due to its potential to lead to use after free vulnerabilities.
How do I fix CVE-2018-13905?
To mitigate CVE-2018-13905, it is recommended to apply the latest security patches provided by Qualcomm or your device manufacturer.
Which devices are affected by CVE-2018-13905?
CVE-2018-13905 affects a range of Qualcomm Snapdragon devices, including MDM9206, MDM9607, and various Snapdragon series.
What kind of vulnerability is CVE-2018-13905?
CVE-2018-13905 is classified as a use after free vulnerability resulting from improper handling of syncsource locks.
Can CVE-2018-13905 be exploited remotely?
Yes, CVE-2018-13905 could potentially be exploited remotely if an attacker has access to the affected device's software.