CVE-2020-3671

Use-after-free issue could occur due to dangling pointer when generating a frame buffer in OpenGL ES in Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music in APQ8009, Nicobar, QCM2150, QCS405, Saipan, SDM845, SM8150, SM8250, SXR2130

Score

CVSS 3.1 9.8 Critical

Status

Modified - product-security@qualcomm.com

Published

2020-07-30

Last modified

2024-08-04

Weaknesses

CWE-416

Affected products

• Apq8009 Firmware (Qualcomm)
• Nicobar Firmware (Qualcomm)
• Qcm2150 Firmware (Qualcomm)
• Qcs405 Firmware (Qualcomm)
• Saipan Firmware (Qualcomm)
• Sdm845 Firmware (Qualcomm)
• Sm8150 Firmware (Qualcomm)
• Sm8250 Firmware (Qualcomm)
• Sxr2130 Firmware (Qualcomm)
• Snapdragon Compute (Qualcomm Inc.)
• Snapdragon Consumer Iot (Qualcomm Inc.)
• Snapdragon Industrial Iot (Qualcomm Inc.)
• Snapdragon Mobile (Qualcomm Inc.)
• Snapdragon Voice Music (Qualcomm Inc.)

References

• https://www.qualcomm.com/company/product-security/bulletins/july-2020-bulletin
• https://www.qualcomm.com/company/product-security/bulletins/july-2020-security-bulletin