Skip to content
Not rated

CVE-2018-5891 While processing modem SSR after IMS is registered, the IMS data daemon is restarted but the ipc_dataHandle is no longer…

Description

While processing modem SSR after IMS is registered, the IMS data daemon is restarted but the ipc_dataHandle is no longer available. Consequently, the DPL thread frees the internal memory for dataDHandle but the local variable pointer is not updated which can lead to a Use After Free condition in Snapdragon Mobile and Snapdragon Wear.

Affected products and versions

Product Affected versions Fixed in
Snapdragon Mobile, Snapdragon Wear Versions not published
The 132 CVEs of Snapdragon Mobile, Snapdragon Wear →
Track this CVE