CVE-2018-13925: Use After Free
Error in parsing PMT table frees the memory allocated for the map section but does not reset the context map section reference causing heap use after free issue in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Wearables in MDM9206, MDM9607, MDM9650, MSM8909W, MSM8996AU, QCS605, Qualcomm 215, SD 210/SD 212/SD 205, SD 425, SD 427, SD 430, SD 435, SD 439 / SD 429, SD 450, SD 600, SD 615/16/SD 415, SD 625, SD 632, SD 636, SD 650/52, SD 712 / SD 710 / SD 670, SD 820, SD 820A, SD 835, SD 845 / SD 850, SD 855, SDA660, SDM439, SDM630, SDM660, SDX20, SnapdragonHighMed2016, SXR1130
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2018-13925?
CVE-2018-13925 is classified as a high-severity vulnerability due to the potential for heap use after free exploitation.
How do I fix CVE-2018-13925?
To mitigate CVE-2018-13925, ensure that you apply the latest firmware updates provided by Qualcomm or manufacturers of affected devices.
Which devices are affected by CVE-2018-13925?
CVE-2018-13925 affects various Qualcomm Snapdragon Automotive, Compute, Connectivity, and IoT products.
What is the impact of CVE-2018-13925?
The impact of CVE-2018-13925 includes potential crashes and exploitation resulting in unauthorized access to system resources.
Is CVE-2018-13925 exploited in the wild?
As of the information available, there are no confirmed reports of CVE-2018-13925 being actively exploited in the wild.