CVE-2017-18156

Summary

While processing camera buffers in camera driver, a use after free condition can occur in Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear in MDM9206, MDM9607, MDM9650, MSM8996AU, SD 210/SD 212/SD 205, SD 625, SD 820, SD 820A, SD 835, SDX20.

Affected Software

VendorProductVersion RangeStatus
Qualcomm Technologies, Inc.Snapdragon Automobile, Snapdragon Mobile, Snapdragon WearMDM9206affected
Qualcomm Technologies, Inc.Snapdragon Automobile, Snapdragon Mobile, Snapdragon WearMDM9607affected
Qualcomm Technologies, Inc.Snapdragon Automobile, Snapdragon Mobile, Snapdragon WearMDM9650affected
Qualcomm Technologies, Inc.Snapdragon Automobile, Snapdragon Mobile, Snapdragon WearMSM8996AUaffected
Qualcomm Technologies, Inc.Snapdragon Automobile, Snapdragon Mobile, Snapdragon WearSD 210/SD 212/SD 205affected
Qualcomm Technologies, Inc.Snapdragon Automobile, Snapdragon Mobile, Snapdragon WearSD 625affected
Qualcomm Technologies, Inc.Snapdragon Automobile, Snapdragon Mobile, Snapdragon WearSD 820affected
Qualcomm Technologies, Inc.Snapdragon Automobile, Snapdragon Mobile, Snapdragon WearSD 820Aaffected
Qualcomm Technologies, Inc.Snapdragon Automobile, Snapdragon Mobile, Snapdragon WearSD 835affected
Qualcomm Technologies, Inc.Snapdragon Automobile, Snapdragon Mobile, Snapdragon WearSDX20affected

Weaknesses

  • CWE416: Use After Free

ADP Enrichment

CVE Program Container

Additional References

References