NetSight
medium5.5

CVE-2019-10484

Use after free issue occurs when command destructors access dynamically allocated response buffer which is already deallocated during previous command teardwon…

Impact

Use after free issue occurs when command destructors access dynamically allocated response buffer which is already deallocated during previous command teardwon sequence in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in APQ8098, MSM8909W, Nicobar, QCS405, QCS605, SDA845, SDM660, SDM670, SDM710, SDM845, SDX24, SM6150, SM7150, SM8150, SM8250, SXR2130

Affected products

VendorProductAffected versions
QualcommApq8098 Firmware
All versions
QualcommMsm8909w Firmware
All versions
QualcommNicobar Firmware
All versions
QualcommQcs405 Firmware
All versions
QualcommQcs605 Firmware
All versions
QualcommSda845 Firmware
All versions
QualcommSdm660 Firmware
All versions
QualcommSdm670 Firmware
All versions
QualcommSdm710 Firmware
All versions
QualcommSdm845 Firmware
All versions
QualcommSdx24 Firmware
All versions
QualcommSm6150 Firmware
All versions

Weakness classification

References