CVE-2018-13925

Error in parsing PMT table frees the memory allocated for the map section but does not reset the context map section reference causing heap use after free…

published May 24, 2019

CVSS
—
EPSS
1%
Percentile
60.4
In the wild
Unconfirmed
What it is

⚠️ A sneaky use-after-free flaw hangs around like a ghost in the heap after memory is freed! 🕵️‍♂️ Think of it as trying to read a book after the pages have been torn out — the context is still there in your mind, but the actual content is gone, leading to confusion and unexpected outcomes. 📚 An attacker could exploit this vulnerability to manipulate the system's memory, potentially leading to crashes or unexpected behavior. This could compromise the integrity of the devices using affected Qualcomm Snapdragon chipsets, which are found in various IoT and consumer applications.

Put simply

Think of it as trying to read a book after the pages have been torn out — the context is still there in your mind, but the actual content is gone, leading to confusion and unexpected outcomes. 📚 This vulnerability arises from an error in parsing the PMT table that frees allocated memory without resetting the map section reference, resulting in a use-after-free condition on Snapdragon devices.

What to do

An attacker could exploit this vulnerability to manipulate the system's memory, potentially leading to crashes or unexpected behavior. This could compromise the integrity of the devices using affected Qualcomm Snapdragon chipsets, which are found in various IoT and consumer applications. To mitigate this issue, ensure that your devices running affected Snapdragon chipsets are updated to the latest firmware that patches this vulnerability. Additionally, review and test applications that interact with the affected components for stability. You've got this! Keep your devices updated, and together we can keep the digital world safe! 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00935 · 60.4th percentile
Published
2019-05-24T16:44Z
EPSS history
Timeline
  • 24 MAY 16:44Z
    Error in parsing PMT table frees the memory allocated for the map section but does not reset the context map section reference causing heap use after free…
    cvelistv5