{"id":"CVE-2018-13905","state":"PUBLISHED","title":"KGSL syncsource lock not handled properly during syncsource cleanup can lead to use after free issue in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdra","description":"KGSL syncsource lock not handled properly during syncsource cleanup can lead to use after free issue in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables in MDM9206, MDM9607, MDM9650, MSM8909W, QCS605, SD 210/SD 212/SD 205, SD 439 / SD 429, SD 712 / SD 710 / SD 670, SD 820A, SD 845 / SD 850, SD 855, SDM439, SDM660, SDX24.","publishedAt":"2019-02-25T23:00:00.000Z","updatedAt":"2024-08-05T09:14:47.191Z","severity":null,"assigner":"qualcomm","products":["Qualcomm, Inc. Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables"],"affected":[{"vendor":"Qualcomm, Inc.","product":"Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables","versions":[{"version":"MDM9206, MDM9607, MDM9650, MSM8909W, QCS605, SD 210/SD 212/SD 205, SD 439 / SD 429, SD 712 / SD 710 / SD 670, SD 820A, SD 845 / SD 850, SD 855, SDM439, SDM660, SDX24","status":"affected"}]}],"references":["http://www.securityfocus.com/bid/106949","https://www.codeaurora.org/security-bulletin/2019/02/04/february-2019-code-aurora-security-bulletin"],"weaknesses":[],"ingestedAt":"2026-10-29T19:44:17.855Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2018/13xxx/CVE-2018-13905.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2018-13905","state":"PUBLISHED","datePublished":"2019-02-25T23:00:00.000Z","dateUpdated":"2024-08-05T09:14:47.191Z","assignerShortName":"qualcomm","assignerOrgId":"2cfc7d3e-20d3-47ac-8db7-1b7285aff15f","dateReserved":"2018-07-11T00:00:00.000Z"},"containers":{"cna":{"descriptions":[{"lang":"en","value":"KGSL syncsource lock not handled properly during syncsource cleanup can lead to use after free issue in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables in MDM9206, MDM9607, MDM9650, MSM8909W, QCS605, SD 210/SD 212/SD 205, SD 439 / SD 429, SD 712 / SD 710 / SD 670, SD 820A, SD 845 / SD 850, SD 855, SDM439, SDM660, SDX24."}],"affected":[{"vendor":"Qualcomm, Inc.","product":"Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables","versions":[{"version":"MDM9206, MDM9607, MDM9650, MSM8909W, QCS605, SD 210/SD 212/SD 205, SD 439 / SD 429, SD 712 / SD 710 / SD 670, SD 820A, SD 845 / SD 850, SD 855, SDM439, SDM660, SDX24","status":"affected"}]}],"references":[{"url":"http://www.securityfocus.com/bid/106949","name":"106949","tags":["vdb-entry","x_refsource_BID"]},{"url":"https://www.codeaurora.org/security-bulletin/2019/02/04/february-2019-code-aurora-security-bulletin","tags":["x_refsource_CONFIRM"]}],"problemTypes":[{"descriptions":[{"description":"Use After Free issue in Linux Graphics","lang":"en","type":"text"}]}],"providerMetadata":{"shortName":"qualcomm","dateUpdated":"2019-02-26T10:57:01.000Z","orgId":"2cfc7d3e-20d3-47ac-8db7-1b7285aff15f"},"datePublic":"2019-02-04T00:00:00.000Z","x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"product-security@qualcomm.com","ID":"CVE-2018-13905","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables","version":{"version_data":[{"version_value":"MDM9206, MDM9607, MDM9650, MSM8909W, QCS605, SD 210/SD 212/SD 205, SD 439 / SD 429, SD 712 / SD 710 / SD 670, SD 820A, SD 845 / SD 850, SD 855, SDM439, SDM660, SDX24"}]}}]},"vendor_name":"Qualcomm, Inc."}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"KGSL syncsource lock not handled properly during syncsource cleanup can lead to use after free issue in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables in MDM9206, MDM9607, MDM9650, MSM8909W, QCS605, SD 210/SD 212/SD 205, SD 439 / SD 429, SD 712 / SD 710 / SD 670, SD 820A, SD 845 / SD 850, SD 855, SDM439, SDM660, SDX24."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"Use After Free issue in Linux Graphics"}]}]},"references":{"reference_data":[{"name":"106949","refsource":"BID","url":"http://www.securityfocus.com/bid/106949"},{"name":"https://www.codeaurora.org/security-bulletin/2019/02/04/february-2019-code-aurora-security-bulletin","refsource":"CONFIRM","url":"https://www.codeaurora.org/security-bulletin/2019/02/04/february-2019-code-aurora-security-bulletin"}]}}},"adp":[{"title":"CVE Program Container","references":[{"url":"http://www.securityfocus.com/bid/106949","name":"106949","tags":["vdb-entry","x_refsource_BID","x_transferred"]},{"url":"https://www.codeaurora.org/security-bulletin/2019/02/04/february-2019-code-aurora-security-bulletin","tags":["x_refsource_CONFIRM","x_transferred"]}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2024-08-05T09:14:47.191Z"}}]}}}