NetSight
critical9.8

CVE-2019-10612

UTCB object has a function pointer called by the reaper to deallocate its memory resources and this address can potentially be corrupted by stack overflow in S…

Impact

UTCB object has a function pointer called by the reaper to deallocate its memory resources and this address can potentially be corrupted by stack overflow in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wired Infrastructure and Networking in MDM9205, MDM9650, QCS605, SA6155P, SC8180X, SDA845, SDM670, SDM710, SDM845, SDM850, SDX55, SM6150, SM7150, SM8150, SM8250, SXR1130, SXR2130

Affected products

VendorProductAffected versions
QualcommMdm9205 Firmware
All versions
QualcommMdm9650 Firmware
All versions
QualcommQcs605 Firmware
All versions
QualcommSa6155p Firmware
All versions
QualcommSc8180x Firmware
All versions
QualcommSda845 Firmware
All versions
QualcommSdm670 Firmware
All versions
QualcommSdm710 Firmware
All versions
QualcommSdm845 Firmware
All versions
QualcommSdm850 Firmware
All versions
QualcommSdx55 Firmware
All versions
QualcommSm6150 Firmware
All versions

Weakness classification

References