NetSight
high7.8

CVE-2019-10580

When kernel thread unregistered listener, Use after free issue happened as the listener client`s private data has been already freed in Snapdragon Auto, Snapdr…

Impact

When kernel thread unregistered listener, Use after free issue happened as the listener client`s private data has been already freed in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in MDM9607, MSM8909W, Nicobar, QCM2150, QCS405, QCS605, Saipan, SC8180X, SDM429W, SDX55, SM8150, SM8250, SXR2130

Affected products

VendorProductAffected versions
QualcommMdm9607 Firmware
All versions
QualcommMsm8909w Firmware
All versions
QualcommNicobar Firmware
All versions
QualcommQcm2150 Firmware
All versions
QualcommQcs405 Firmware
All versions
QualcommQcs605 Firmware
All versions
QualcommSaipan Firmware
All versions
QualcommSc8180x Firmware
All versions
QualcommSdm429w Firmware
All versions
QualcommSdx55 Firmware
All versions
QualcommSm8150 Firmware
All versions
QualcommSm8250 Firmware
All versions

Weakness classification

References