CVE-2018-13920: Qualcomm MDM9206 Firmware

High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days.

Use-after-free condition due to Improper handling of hrtimers when the PMU driver tries to access its events in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables in MDM9206, MDM9607, MDM9650, MSM8909W, QCS605, Qualcomm 215, SD 425, SD 439 / SD 429, SD 450, SD 625, SD 632, SD 636, SD 712 / SD 710 / SD 670, SD 820A, SD 845 / SD 850, SD 855, SDM439, SDM630, SDM660, SDX24

Affected products

Qualcomm MDM9206 Firmware: affected versions not specified
Qualcomm MDM9607 Firmware: affected versions not specified
Qualcomm MDM9650 Firmware: affected versions not specified
Qualcomm MSM8909W Firmware: affected versions not specified
Qualcomm QCS605 Firmware: affected versions not specified
Qualcomm QM215 Firmware: affected versions not specified
Qualcomm Sd 425 Firmware: affected versions not specified
Qualcomm Sd 429 Firmware: affected versions not specified
Qualcomm Sd 439 Firmware: affected versions not specified
Qualcomm Sd 450 Firmware: affected versions not specified
Qualcomm Sd 625 Firmware: affected versions not specified
Qualcomm Sd 632 Firmware: affected versions not specified
Qualcomm Sd 636 Firmware: affected versions not specified
Qualcomm Sd 670 Firmware: affected versions not specified
Qualcomm Sd 710 Firmware: affected versions not specified
Qualcomm Sd 712 Firmware: affected versions not specified
Qualcomm Sd 820a Firmware: affected versions not specified
Qualcomm Sd 845 Firmware: affected versions not specified
Qualcomm Sd 850 Firmware: affected versions not specified
Qualcomm Sd 855 Firmware: affected versions not specified
Qualcomm SDM439 Firmware: affected versions not specified
Qualcomm SDM630 Firmware: affected versions not specified
Qualcomm SDM660 Firmware: affected versions not specified
Qualcomm SDX24 Firmware: affected versions not specified

Published 2019-05-24. Last modified 2026-06-17.