CVE-2020-3642

Use after free issue in camera applications when used randomly over multiple operations due to pointer not set to NULL after free/destroy of the object in Snapdragon Consumer IOT, Snapdragon Mobile in Kamorta, QCS605, Rennell, Saipan, SDM670, SDM710, SDM845, SM6150, SM7150, SM8150, SM8250, SXR1130, SXR2130

Score

CVSS 3.1 7.8 High

Status

Modified - product-security@qualcomm.com

Published

2020-06-22

Last modified

2024-08-04

Weaknesses

CWE-416

Affected products

• Kamorta Firmware (Qualcomm)
• Qcs605 Firmware (Qualcomm)
• Rennell Firmware (Qualcomm)
• Saipan Firmware (Qualcomm)
• Sdm670 Firmware (Qualcomm)
• Sdm710 Firmware (Qualcomm)
• Sdm845 Firmware (Qualcomm)
• Sm6150 Firmware (Qualcomm)
• Sm7150 Firmware (Qualcomm)
• Sm8150 Firmware (Qualcomm)
• Sm8250 Firmware (Qualcomm)
• Sxr1130 Firmware (Qualcomm)
• Sxr2130 Firmware (Qualcomm)
• Snapdragon Consumer Iot (Qualcomm Inc.)
• Snapdragon Mobile (Qualcomm Inc.)

References

• https://www.qualcomm.com/company/product-security/bulletins/june-2020-bulletin
• https://www.qualcomm.com/company/product-security/bulletins/june-2020-security-bulletin