CVE-2018-3593

In Android before security patch level 2018-04-05 on Qualcomm Snapdragon Automobile, Snapdragon Mobile, and Snapdragon Wear MDM9206, MDM9607, MDM9650…

published April 11, 2018

CVSS
—
EPSS
1%
Percentile
69.0
In the wild
Unconfirmed
What it is

⚠️ Repeated requests can lead to a double free condition in the Snapdragon architecture! A potential mishap that could leave your systems vulnerable. 🔥 Think of it like a hotel with check-in and check-out. If guests repeatedly check in and out without proper management, the rooms can end up double-booked — causing chaos for everyone involved. This could leave your system in a state where resources are improperly managed, possibly leading to crashes or unpredictable behavior. While not immediately exploitable, it’s like having a leaky faucet — not urgent, but you definitely want to fix it before it becomes a bigger problem!

Put simply

Think of it like a hotel with check-in and check-out. If guests repeatedly check in and out without proper management, the rooms can end up double-booked — causing chaos for everyone involved. In Android versions prior to the 2018-04-05 security patch, repeatedly enabling and disabling eMBMS requests on affected Snapdragon chips can cause a double free error, where memory is freed twice, potentially leading to crashes or other erratic behaviors.

What to do

This could leave your system in a state where resources are improperly managed, possibly leading to crashes or unpredictable behavior. While not immediately exploitable, it’s like having a leaky faucet — not urgent, but you definitely want to fix it before it becomes a bigger problem! Ensure that your devices are updated to the latest security patch level of 2018-04-05 or newer. Regularly check for updates from the device manufacturer and apply them promptly to mitigate this issue. You've got this! With a quick update, you can keep your systems safe and sound. 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01252 · 69.0th percentile
Published
2018-04-11T15:00Z
EPSS history
Timeline
  • 11 APR 15:00Z
    In Android before security patch level 2018-04-05 on Qualcomm Snapdragon Automobile, Snapdragon Mobile, and Snapdragon Wear MDM9206, MDM9607, MDM9650…
    cvelistv5