NetSight
high7.8

CVE-2019-10583

Use after free issue occurs when camera access sensors data through direct report mode in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdra…

Impact

Use after free issue occurs when camera access sensors data through direct report mode in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in APQ8096AU, MDM9607, MSM8909W, Nicobar, QCS605, SA6155P, SDA845, SDM429W, SDM670, SDM710, SDM845, SM6150, SM8150, SM8250, SXR1130, SXR2130

Affected products

VendorProductAffected versions
QualcommApq8096au Firmware
All versions
QualcommMdm9607 Firmware
All versions
QualcommMsm8909w Firmware
All versions
QualcommNicobar Firmware
All versions
QualcommQcs605 Firmware
All versions
QualcommSa6155p Firmware
All versions
QualcommSda845 Firmware
All versions
QualcommSdm429w Firmware
All versions
QualcommSdm670 Firmware
All versions
QualcommSdm710 Firmware
All versions
QualcommSdm845 Firmware
All versions
QualcommSm6150 Firmware
All versions

Weakness classification

References