CVE-2020-3613 - Double free issue in kernel memory mapping due to lack of memory protection mechanism in Snapdragon

CVE-2020-3613

Summary

Double free issue in kernel memory mapping due to lack of memory protection mechanism in Snapdragon Compute, Snapdragon Mobile, Snapdragon Voice & Music in SM8150

References

https://www.qualcomm.com/company/product-security/bulletins/june-2020-bulletin
https://www.qualcomm.com/company/product-security/bulletins/june-2020-security-bulletin

Vulnerable Configurations

cpe:2.3:o:qualcomm:sm8150_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:sm8150_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:sm8150:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:sm8150:-:*:*:*:*:*:*:*

CVSS

Base:	7.2 (as of 24-06-2020 - 19:50)
Impact:
Exploitability:

CWE

CWE-415

CAPEC

Access

Vector	Complexity	Authentication
LOCAL	LOW	NONE

Impact

Confidentiality	Integrity	Availability
COMPLETE	COMPLETE	COMPLETE

cvss-vector via4

AV:L/AC:L/Au:N/C:C/I:C/A:C

refmap via4

confirm

https://www.qualcomm.com/company/product-security/bulletins/june-2020-bulletin

Last major update

24-06-2020 - 19:50

Published

22-06-2020 - 07:15

Last modified

24-06-2020 - 19:50