CVE-2020-3613
Double free issue in kernel memory mapping due to lack of memory protection mechanism in...
Double free issue in kernel memory mapping due to lack of memory protection mechanism in Snapdragon Compute, Snapdragon Mobile, Snapdragon Voice & Music in SM8150
Attack profile
How easy it is to exploit
- Attack vector
- Local
- Complexity
- Low
- Privileges needed
- Low
- User interaction
- None
What an attacker can affect
- Confidentiality
- High
- Integrity
- High
- Availability
- High
Exploit likelihood
What each source reports
NVD Score used
Double free issue in kernel memory mapping due to lack of memory protection mechanism in Snapdragon Compute, Snapdragon Mobile, Snapdragon Voice & Music in SM8150
- Record
CVE-2020-3613- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - CVSS 2.0
- 7.2 High
AV:L/AC:L/Au:N/C:C/I:C/A:C - Weakness
- CWE-415
- Updated
- 2026-11-02
CVE List No score
Double free issue in kernel memory mapping due to lack of memory protection mechanism in Snapdragon Compute, Snapdragon Mobile, Snapdragon Voice & Music in SM8150
- Record
CVE-2020-3613- Updated
- 2026-11-02
EUVDEUVD-2020-24884 No score
Double free issue in kernel memory mapping due to lack of memory protection mechanism in Snapdragon Compute, Snapdragon Mobile, Snapdragon Voice & Music in SM8150
- Record
EUVD-2020-24884- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-9j42-xg9h-9p2w No score
Double free issue in kernel memory mapping due to lack of memory protection mechanism in...
Double free issue in kernel memory mapping due to lack of memory protection mechanism in Snapdragon Compute, Snapdragon Mobile, Snapdragon Voice & Music in SM8150
- Record
GHSA-9j42-xg9h-9p2w- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
:linux_kernel:QualcommAndroid |
SoCVersion:0 up to SoCVersion:2020-09-05, plus listed versions SoCVersion |
SoCVersion:2020-09-05 |
History
| Recorded | Changed | Sources |
|---|---|---|
| facts | OSV | |
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2020-3613 is a high vulnerability (CVSS 7.8) in Qualcomm, Inc. Snapdragon Compute, Snapdragon Mobile, Snapdragon Voice & Music, published June 22, 2020. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.24%, the 14th percentile. Fixed in :linux_kernel:Qualcomm SoCVersion:2020-09-05.
References
qualcomm.com/company/product-security/bulletins/june-2020-bulletin
nvd.nist.gov/vuln/detail/CVE-2020-3613
github.com/advisories/GHSA-9j42-xg9h-9p2w
source.android.com/security/bulletin/2020-09-01
source.codeaurora.org/quic/la/kernel/msm-4.14/commit?id=2c3343ea1d55542cb7a712eb40ff184245921bde