CVE-2020-3642: Qualcomm Kamorta Firmware

High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days.

Use after free issue in camera applications when used randomly over multiple operations due to pointer not set to NULL after free/destroy of the object in Snapdragon Consumer IOT, Snapdragon Mobile in Kamorta, QCS605, Rennell, Saipan, SDM670, SDM710, SDM845, SM6150, SM7150, SM8150, SM8250, SXR1130, SXR2130

Affected products

  • Qualcomm Kamorta Firmware: affected versions not specified
  • Qualcomm QCS605 Firmware: affected versions not specified
  • Qualcomm Rennell Firmware: affected versions not specified
  • Qualcomm Saipan Firmware: affected versions not specified
  • Qualcomm SDM670 Firmware: affected versions not specified
  • Qualcomm SDM710 Firmware: affected versions not specified
  • Qualcomm SDM845 Firmware: affected versions not specified
  • Qualcomm SM6150 Firmware: affected versions not specified
  • Qualcomm SM7150 Firmware: affected versions not specified
  • Qualcomm SM8150 Firmware: affected versions not specified
  • Qualcomm SM8250 Firmware: affected versions not specified
  • Qualcomm SXR1130 Firmware: affected versions not specified
  • Qualcomm SXR2130 Firmware: affected versions not specified

Published 2020-06-22. Last modified 2026-06-17.