What happened
Memory Corruption when processing multiple IOCTL calls with the same buffer file descriptor input due to accessing already freed memory.
Affected versions
Snapdragon: FastConnect 6700; FastConnect 6900; FastConnect 7800; Molokai; Orne; Pandeiro; QCM5430; QCM6490; QMP1000; QMP2001; Qualcomm Video Collaboration VC3 Platform; SC8380XP; SD865 5G; SM6850; SM8845P; Snapdragon 460 Mobile Platform; Snapdragon 662 Mobile Platform; Snapdragon 8 Elite Gen 5; Snapdragon AR1 Gen 1 Platform; Snapdragon XR2 5G Platform; Snapdragon XR2+ Gen 1 Platform; SXR2230P; SXR2250P; WCD9370; WCD9375; WCD9378; WCD9380; WCD9385; WCD9395; WCN3950; WCN3988; WCN6450; WCN7760; WCN7860; WCN7861; WCN7880; WCN7881; WSA8810; WSA8815; WSA8830; WSA8832; WSA8835; WSA8840; WSA8845; WSA8845H; WSA8850; WSA8850W; WSA8855C Fixed: See vendor advisory.
Why it matters
Review the vendor advisory and exposure of the affected product to determine operational impact.
Detection & mitigation
- Apply vendor-provided updates or mitigations.
- Review affected product exposure and access logs.
Public PoC references
No public PoC reference has passed the current publication threshold.