CVE-2018-13900

Use-after-free vulnerability will occur as there is no protection for the route table`s rule in IPA driver in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in versions MDM9150, MDM9206, MDM9607, MDM9640, MDM9650, MSM8909W, MSM8996AU, QCS605, SD 210/SD 212/SD 205, SD 425, SD 427, SD 430, SD 435, SD 439 / SD 429, SD 450, SD 625, SD 636, SD 712 / SD 710 / SD 670, SD 820, SD 820A, SD 835, SD 845 / SD 850, SD 855, SDA660, SDM439, SDM630, SDM660, SDX20, SDX24.

• CWE-416

• http://www.securityfocus.com/bid/106949Third Party Advisory, VDB Entry
• https://www.codeaurora.org/security-bulletin/2019/02/04/february-2019-code-aurora-security-bulletinPatch, Third Party Advisory
• http://www.securityfocus.com/bid/106949Third Party Advisory, VDB Entry
• https://www.codeaurora.org/security-bulletin/2019/02/04/february-2019-code-aurora-security-bulletinPatch, Third Party Advisory

Published

Feb 25, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-13895Due to the missing permissions on several content providers …
• CVE-2018-13896XBL_SEC image authentication and other crypto related valida…
• CVE-2018-13897Clients hostname gets added to DNS record on device which is…
• CVE-2018-13898Out-of-Bounds write due to incorrect array index check in PM…
• CVE-2018-13899Processing messages after error may result in user after fre…
• CVE-2018-1390IBM Financial Transaction Manager for Check Services for Mul…5.4
• CVE-2018-13901Due to missing permissions in Android Manifest file, Sensiti…
• CVE-2018-13902Out of bounds memory read and access due to improper array i…
• CVE-2018-13903u'Error in UE due to race condition in EPCO handling' in Sna…8.1
• CVE-2018-13904Improper input validation in SCM handler to access storage i…
• CVE-2018-13905KGSL syncsource lock not handled properly during syncsource …
• CVE-2018-13906The HMAC authenticating the message from QSEE is vulnerable …