CVE-2018-13905

KGSL syncsource lock not handled properly during syncsource cleanup can lead to use after free issue in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables in MDM9206, MDM9607, MDM9650, MSM8909W, QCS605, SD 210/SD 212/SD 205, SD 439 / SD 429, SD 712 / SD 710 / SD 670, SD 820A, SD 845 / SD 850, SD 855, SDM439, SDM660, SDX24.

• CWE-416

• http://www.securityfocus.com/bid/106949Third Party Advisory, VDB Entry
• https://www.codeaurora.org/security-bulletin/2019/02/04/february-2019-code-aurora-security-bulletinPatch, Third Party Advisory
• http://www.securityfocus.com/bid/106949Third Party Advisory, VDB Entry
• https://www.codeaurora.org/security-bulletin/2019/02/04/february-2019-code-aurora-security-bulletinPatch, Third Party Advisory

Published

Feb 25, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-1390IBM Financial Transaction Manager for Check Services for Mul…5.4
• CVE-2018-13900Use-after-free vulnerability will occur as there is no prote…
• CVE-2018-13901Due to missing permissions in Android Manifest file, Sensiti…
• CVE-2018-13902Out of bounds memory read and access due to improper array i…
• CVE-2018-13903u'Error in UE due to race condition in EPCO handling' in Sna…8.1
• CVE-2018-13904Improper input validation in SCM handler to access storage i…
• CVE-2018-13906The HMAC authenticating the message from QSEE is vulnerable …
• CVE-2018-13907While deserializing any key blob during key operations, buff…
• CVE-2018-13908Truncated access authentication token leads to weakened acce…
• CVE-2018-13909Metadata verification and partial hash system calls by bootl…
• CVE-2018-1391IBM Financial Transaction Manager 3.0.4 and 3.1.0 for ACH Se…
• CVE-2018-13910Out-of-Bounds access in TZ due to invalid index calculated t…