Use after free vulnerability in KGSL syncsource cleanup in multiple Snapdragon platforms

CVE-2018-13905 · HIGH Severity

AV:L/AC:L/AU:N/C:C/I:C/A:C

KGSL syncsource lock not handled properly during syncsource cleanup can lead to use after free issue in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables in MDM9206, MDM9607, MDM9650, MSM8909W, QCS605, SD 210/SD 212/SD 205, SD 439 / SD 429, SD 712 / SD 710 / SD 670, SD 820A, SD 845 / SD 850, SD 855, SDM439, SDM660, SDX24.

Learn more about our Industrial Pen Testing.