Description
Multiple Qualcomm chipsets contain a use-after-free vulnerability due to memory corruption in DSP Services while maintaining memory maps of HLOS memory.
Full record on cve.org →Affected packages
| Package | Vendor / Product | Version range | Status |
|---|---|---|---|
| fastconnect_6700_firmware | qualcomm / fastconnect_6700_firmware | >= 0, <= * | affected |
| fastconnect_6800_firmware | qualcomm / fastconnect_6800_firmware | >= 0, <= * | affected |
| fastconnect_6900_firmware | qualcomm / fastconnect_6900_firmware | >= 0, <= * | affected |
| fastconnect_7800_firmware | qualcomm / fastconnect_7800_firmware | >= 0, <= * | affected |
| qam8295p_firmware | qualcomm / qam8295p_firmware | >= 0, <= * | affected |
| qca6174a_firmware | qualcomm / qca6174a_firmware | >= 0, <= * | affected |
| qca6391_firmware | qualcomm / qca6391_firmware | >= 0, <= * | affected |
| qca6426_firmware | qualcomm / qca6426_firmware | >= 0, <= * | affected |
| qca6436_firmware | qualcomm / qca6436_firmware | >= 0, <= * | affected |
| qca6574au_firmware | qualcomm / qca6574au_firmware | >= 0, <= * | affected |
| qca6584au_firmware | qualcomm / qca6584au_firmware | >= 0, <= * | affected |
| qca6595au_firmware | qualcomm / qca6595au_firmware | >= 0, <= * | affected |
| qca6595_firmware | qualcomm / qca6595_firmware | >= 0, <= * | affected |
| qca6688aq_firmware | qualcomm / qca6688aq_firmware | >= 0, <= * | affected |
| qca6696_firmware | qualcomm / qca6696_firmware | >= 0, <= * | affected |
| qca6698aq_firmware | qualcomm / qca6698aq_firmware | >= 0, <= * | affected |
| qcs410_firmware | qualcomm / qcs410_firmware | >= 0, <= * | affected |
| qcs610_firmware | qualcomm / qcs610_firmware | >= 0, <= * | affected |
| qcs6490_firmware | qualcomm / qcs6490_firmware | >= 0, <= * | affected |
| qualcomm_video_collaboration_vc1_platform_firmware | qualcomm / qualcomm_video_collaboration_vc1_platform_firmware | >= 0, <= * | affected |
| qualcomm_video_collaboration_vc3_platform_firmware | qualcomm / qualcomm_video_collaboration_vc3_platform_firmware | >= 0, <= * | affected |
| sa4150p_firmware | qualcomm / sa4150p_firmware | >= 0, <= * | affected |
| sa4155p_firmware | qualcomm / sa4155p_firmware | >= 0, <= * | affected |
| sa6145p_firmware | qualcomm / sa6145p_firmware | >= 0, <= * | affected |
| sa6150p_firmware | qualcomm / sa6150p_firmware | >= 0, <= * | affected |
| sa6155p_firmware | qualcomm / sa6155p_firmware | >= 0, <= * | affected |
| sa8145p_firmware | qualcomm / sa8145p_firmware | >= 0, <= * | affected |
| sa8150p_firmware | qualcomm / sa8150p_firmware | >= 0, <= * | affected |
| sa8155p_firmware | qualcomm / sa8155p_firmware | >= 0, <= * | affected |
| sa8195p_firmware | qualcomm / sa8195p_firmware | >= 0, <= * | affected |
| sa8295p_firmware | qualcomm / sa8295p_firmware | >= 0, <= * | affected |
| sd660_firmware | qualcomm / sd660_firmware | >= 0, <= * | affected |
| sd865_5g_firmware | qualcomm / sd865_5g_firmware | >= 0, <= * | affected |
| sg4150p_firmware | qualcomm / sg4150p_firmware | >= 0, <= * | affected |
| sm6225-ad_firmware | qualcomm / sm6225-ad_firmware | >= 0, <= * | affected |
| Snapdragon | Qualcomm, Inc. / Snapdragon | FastConnect 6700 | affected |
| Snapdragon | Qualcomm, Inc. / Snapdragon | FastConnect 6800 | affected |
| Snapdragon | Qualcomm, Inc. / Snapdragon | FastConnect 6900 | affected |
| Snapdragon | Qualcomm, Inc. / Snapdragon | FastConnect 7800 | affected |
| Snapdragon | Qualcomm, Inc. / Snapdragon | QAM8295P | affected |
| Snapdragon | Qualcomm, Inc. / Snapdragon | QCA6174A | affected |
| Snapdragon | Qualcomm, Inc. / Snapdragon | QCA6391 | affected |
| Snapdragon | Qualcomm, Inc. / Snapdragon | QCA6426 | affected |
| Snapdragon | Qualcomm, Inc. / Snapdragon | QCA6436 | affected |
| Snapdragon | Qualcomm, Inc. / Snapdragon | QCA6574AU | affected |
| Snapdragon | Qualcomm, Inc. / Snapdragon | QCA6584AU | affected |
| Snapdragon | Qualcomm, Inc. / Snapdragon | QCA6595 | affected |
| Snapdragon | Qualcomm, Inc. / Snapdragon | QCA6595AU | affected |
| Snapdragon | Qualcomm, Inc. / Snapdragon | QCA6688AQ | affected |
| Snapdragon | Qualcomm, Inc. / Snapdragon | QCA6696 | affected |
| Snapdragon | Qualcomm, Inc. / Snapdragon | QCA6698AQ | affected |
| Snapdragon | Qualcomm, Inc. / Snapdragon | QCS410 | affected |
| Snapdragon | Qualcomm, Inc. / Snapdragon | QCS610 | affected |
| Snapdragon | Qualcomm, Inc. / Snapdragon | QCS6490 | affected |
| Snapdragon | Qualcomm, Inc. / Snapdragon | Qualcomm Video Collaboration VC1 Platform | affected |
| Snapdragon | Qualcomm, Inc. / Snapdragon | Qualcomm Video Collaboration VC3 Platform | affected |
| Snapdragon | Qualcomm, Inc. / Snapdragon | SA4150P | affected |
| Snapdragon | Qualcomm, Inc. / Snapdragon | SA4155P | affected |
| Snapdragon | Qualcomm, Inc. / Snapdragon | SA6145P | affected |
| Snapdragon | Qualcomm, Inc. / Snapdragon | SA6150P | affected |
| Snapdragon | Qualcomm, Inc. / Snapdragon | SA6155P | affected |
| Snapdragon | Qualcomm, Inc. / Snapdragon | SA8145P | affected |
| Snapdragon | Qualcomm, Inc. / Snapdragon | SA8150P | affected |
| Snapdragon | Qualcomm, Inc. / Snapdragon | SA8155P | affected |
| Snapdragon | Qualcomm, Inc. / Snapdragon | SA8195P | affected |
| Snapdragon | Qualcomm, Inc. / Snapdragon | SA8295P | affected |
| Snapdragon | Qualcomm, Inc. / Snapdragon | SD660 | affected |
| Snapdragon | Qualcomm, Inc. / Snapdragon | SD865 5G | affected |
| Snapdragon | Qualcomm, Inc. / Snapdragon | SG4150P | affected |
| Snapdragon | Qualcomm, Inc. / Snapdragon | Snapdragon 660 Mobile Platform | affected |
| Snapdragon | Qualcomm, Inc. / Snapdragon | Snapdragon 680 4G Mobile Platform | affected |
| Snapdragon | Qualcomm, Inc. / Snapdragon | Snapdragon 685 4G Mobile Platform (SM6225-AD) | affected |
| Snapdragon | Qualcomm, Inc. / Snapdragon | Snapdragon 865 5G Mobile Platform | affected |
| Snapdragon | Qualcomm, Inc. / Snapdragon | Snapdragon 865+ 5G Mobile Platform (SM8250-AB) | affected |
| Snapdragon | Qualcomm, Inc. / Snapdragon | Snapdragon 870 5G Mobile Platform (SM8250-AC) | affected |
| Snapdragon | Qualcomm, Inc. / Snapdragon | Snapdragon 888 5G Mobile Platform | affected |
| Snapdragon | Qualcomm, Inc. / Snapdragon | Snapdragon 888+ 5G Mobile Platform (SM8350-AC) | affected |
| Snapdragon | Qualcomm, Inc. / Snapdragon | Snapdragon 8 Gen 1 Mobile Platform | affected |
| Snapdragon | Qualcomm, Inc. / Snapdragon | Snapdragon Auto 5G Modem-RF | affected |
| Snapdragon | Qualcomm, Inc. / Snapdragon | Snapdragon Auto 5G Modem-RF Gen 2 | affected |
| Snapdragon | Qualcomm, Inc. / Snapdragon | Snapdragon X55 5G Modem-RF System | affected |
| Snapdragon | Qualcomm, Inc. / Snapdragon | Snapdragon XR2 5G Platform | affected |
| Snapdragon | Qualcomm, Inc. / Snapdragon | SW5100 | affected |
| Snapdragon | Qualcomm, Inc. / Snapdragon | SW5100P | affected |
| Snapdragon | Qualcomm, Inc. / Snapdragon | SXR2130 | affected |
| Snapdragon | Qualcomm, Inc. / Snapdragon | WCD9335 | affected |
| Snapdragon | Qualcomm, Inc. / Snapdragon | WCD9341 | affected |
| Snapdragon | Qualcomm, Inc. / Snapdragon | WCD9370 | affected |
| Snapdragon | Qualcomm, Inc. / Snapdragon | WCD9375 | affected |
| Snapdragon | Qualcomm, Inc. / Snapdragon | WCD9380 | affected |
| Snapdragon | Qualcomm, Inc. / Snapdragon | WCD9385 | affected |
| Snapdragon | Qualcomm, Inc. / Snapdragon | WCN3950 | affected |
| Snapdragon | Qualcomm, Inc. / Snapdragon | WCN3980 | affected |
| Snapdragon | Qualcomm, Inc. / Snapdragon | WCN3988 | affected |
| Snapdragon | Qualcomm, Inc. / Snapdragon | WCN3990 | affected |
| Snapdragon | Qualcomm, Inc. / Snapdragon | WSA8810 | affected |
| Snapdragon | Qualcomm, Inc. / Snapdragon | WSA8815 | affected |
| Snapdragon | Qualcomm, Inc. / Snapdragon | WSA8830 | affected |
| Snapdragon | Qualcomm, Inc. / Snapdragon | WSA8835 | affected |
| snapdragon_660_mobile_platform_firmware | qualcomm / snapdragon_660_mobile_platform_firmware | >= 0, <= * | affected |
| snapdragon_680_4g_mobile_platform_firmware | qualcomm / snapdragon_680_4g_mobile_platform_firmware | >= 0, <= * | affected |
| snapdragon_865\+_5g_firmware | qualcomm / snapdragon_865\+_5g_firmware | >= 0, <= * | affected |
| snapdragon_865_5g_mobile_platform_firmware | qualcomm / snapdragon_865_5g_mobile_platform_firmware | >= 0, <= * | affected |
| snapdragon_870_5g_mobile_platform_firmware | qualcomm / snapdragon_870_5g_mobile_platform_firmware | >= 0, <= * | affected |
| snapdragon_888\+_5g_mobile_platform_firmware | qualcomm / snapdragon_888\+_5g_mobile_platform_firmware | >= 0, <= * | affected |
| snapdragon_888_5g_mobile_platform_firmware | qualcomm / snapdragon_888_5g_mobile_platform_firmware | >= 0, <= * | affected |
| snapdragon_8_gen_1_mobile_platform_firmware | qualcomm / snapdragon_8_gen_1_mobile_platform_firmware | >= 0, <= * | affected |
| snapdragon_auto_5g_modem-rf_firmware | qualcomm / snapdragon_auto_5g_modem-rf_firmware | >= 0, <= * | affected |
| snapdragon_auto_5g_modem-rf_gen_2_firmware | qualcomm / snapdragon_auto_5g_modem-rf_gen_2_firmware | >= 0, <= * | affected |
| snapdragon_x55_5g_modem-rf_system_firmware | qualcomm / snapdragon_x55_5g_modem-rf_system_firmware | >= 0, <= * | affected |
| snapdragon_xr2_5g_platform_firmware | qualcomm / snapdragon_xr2_5g_platform_firmware | >= 0, <= * | affected |
| sw5100_firmware | qualcomm / sw5100_firmware | >= 0, <= * | affected |
| sw5100p_firmware | qualcomm / sw5100p_firmware | >= 0, <= * | affected |
| sxr2130_firmware | qualcomm / sxr2130_firmware | >= 0, <= * | affected |
| wcd9335_firmware | qualcomm / wcd9335_firmware | >= 0, <= * | affected |
| wcd9341_firmware | qualcomm / wcd9341_firmware | >= 0, <= * | affected |
| wcd9370_firmware | qualcomm / wcd9370_firmware | >= 0, <= * | affected |
| wcd9375_firmware | qualcomm / wcd9375_firmware | >= 0, <= * | affected |
| wcd9380_firmware | qualcomm / wcd9380_firmware | >= 0, <= * | affected |
| wcd9385_firmware | qualcomm / wcd9385_firmware | >= 0, <= * | affected |
| wcn3950_firmware | qualcomm / wcn3950_firmware | >= 0, <= * | affected |
| wcn3980_firmware | qualcomm / wcn3980_firmware | >= 0, <= * | affected |
| wcn3988_firmware | qualcomm / wcn3988_firmware | >= 0, <= * | affected |
| wcn3990_firmware | qualcomm / wcn3990_firmware | >= 0, <= * | affected |
| wsa8810_firmware | qualcomm / wsa8810_firmware | >= 0, <= * | affected |
| wsa8815_firmware | qualcomm / wsa8815_firmware | >= 0, <= * | affected |
| wsa8830_firmware | qualcomm / wsa8830_firmware | >= 0, <= * | affected |
| wsa8835_firmware | qualcomm / wsa8835_firmware | >= 0, <= * | affected |