CVSS 3.0
7.8 highCVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HCVE-2018-13919
High (7.8) in qualcomm. EPSS 0.2% chance of exploitation in the next 30 days.
Use-after-free vulnerability will occur if reset of the routing table encounters an invalid rule id while processing command to reset in Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables in MDM9150, MDM9206, MDM9607, MDM9650, MSM8909W, QCS405, QCS605, SD 625, SD 636, SD 675, SD 712 / SD 710 / SD 670, SD 730, SD 820, SD 820A, SD 835, SD 845 / SD 850, SD 855, SDM630, SDM660, SDX20, SDX24
Severity
- EPSS
- 0.2% chance of exploitation in the next 30 days; higher than 11% of CVEs (scores of 2026-10-31)
- CWE
- CWE-416
- Published
- Modified
- Record from
- the NVD, synced
Affected
- qualcomm:mdm9150_firmware
- qualcomm:mdm9206_firmware
- qualcomm:mdm9607_firmware
- qualcomm:mdm9650_firmware
- qualcomm:msm8909w_firmware
- qualcomm:qcs405_firmware
- qualcomm:qcs605_firmware
- qualcomm:sd_625_firmware
- qualcomm:sd_636_firmware
- qualcomm:sd_670_firmware
- qualcomm:sd_675_firmware
- qualcomm:sd_710_firmware
- qualcomm:sd_712_firmware
- qualcomm:sd_730_firmware
- qualcomm:sd_820_firmware
- qualcomm:sd_820a_firmware
- qualcomm:sd_835_firmware
- qualcomm:sd_845_firmware
- qualcomm:sd_850_firmware
- qualcomm:sd_855_firmware
- qualcomm:sdm630_firmware
- qualcomm:sdm660_firmware
- qualcomm:sdx20_firmware
- qualcomm:sdx24_firmware