CVE-2020-3642

Severity: high (CVSS 7.8 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2020-06-22 · updated 2026-06-17
Weakness: CWE-416

Description

Use after free issue in camera applications when used randomly over multiple operations due to pointer not set to NULL after free/destroy of the object in Snapdragon Consumer IOT, Snapdragon Mobile in Kamorta, QCS605, Rennell, Saipan, SDM670, SDM710, SDM845, SM6150, SM7150, SM8150, SM8250, SXR1130, SXR2130

Affected products

Qualcomm Kamorta Firmware: all versions
Qualcomm Qcs605 Firmware: all versions
Qualcomm Rennell Firmware: all versions
Qualcomm Saipan Firmware: all versions
Qualcomm Sdm670 Firmware: all versions
Qualcomm Sdm710 Firmware: all versions
Qualcomm Sdm845 Firmware: all versions
Qualcomm Sm6150 Firmware: all versions
Qualcomm Sm7150 Firmware: all versions
Qualcomm Sm8150 Firmware: all versions
Qualcomm Sm8250 Firmware: all versions
Qualcomm Sxr1130 Firmware: all versions
Qualcomm Sxr2130 Firmware: all versions

References

https://www.qualcomm.com/company/product-security/bulletins/june-2020-bulletin
https://www.qualcomm.com/company/product-security/bulletins/june-2020-security-bulletin
https://www.qualcomm.com/company/product-security/bulletins/june-2020-bulletin

Get alerted when CVE-2020-3642 or the next vulnerability affects your stack