NetSight
high7.8

CVE-2019-10602

Potential use-after-free heap error during Validate/Present calls on display HW composer in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapd…

Impact

Potential use-after-free heap error during Validate/Present calls on display HW composer in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables in APQ8053, APQ8096AU, APQ8098, MDM9206, MDM9207C, MDM9607, MDM9650, MSM8909W, MSM8917, MSM8920, MSM8937, MSM8940, MSM8953, MSM8996AU, QCS605, SDA660, SDM845, SDX20, SM8150

Affected products

VendorProductAffected versions
QualcommApq8053 Firmware
All versions
QualcommApq8096au Firmware
All versions
QualcommApq8098 Firmware
All versions
QualcommMdm9206 Firmware
All versions
QualcommMdm9207c Firmware
All versions
QualcommMdm9607 Firmware
All versions
QualcommMdm9650 Firmware
All versions
QualcommMsm8909w Firmware
All versions
QualcommMsm8917 Firmware
All versions
QualcommMsm8920 Firmware
All versions
QualcommMsm8937 Firmware
All versions
QualcommMsm8940 Firmware
All versions

Weakness classification

References