Description
Memory corruption during buffer allocation due to dereferencing session ctx pointer without checking if pointer is valid in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Mobile
References (1)
Core 1
Core References
Patch, Vendor Advisory x_refsource_confirm
https://www.qualcomm.com/company/product-security/bulletins/may-2021-bulletin
Scores
CVSS v3
6.2
EPSS
0.0005
EPSS Percentile
16.2%
Attack Vector
LOCAL
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Details
CWE
CWE-476
Status
published
Products (50)
qualcomm/pm6150a
qualcomm/pm6150l
qualcomm/pm6350
qualcomm/pm660
qualcomm/pm660l
qualcomm/pm7250b
qualcomm/pm8008
qualcomm/pm8009
qualcomm/pm8350
qualcomm/pm8350b
... and 40 more
Published
May 07, 2021
Tracked Since
Feb 18, 2026