Vulnerabilities > CVE-2019-10484 - Use After Free vulnerability in Qualcomm products

047910
CVSS 2.1 - LOW
Attack vector
LOCAL
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
NONE
Integrity impact
NONE
Availability impact
PARTIAL
local
low complexity
qualcomm
CWE-416
NVD
Published: 2019-12-12
Updated: 2019-12-12

Summary

Use after free issue occurs when command destructors access dynamically allocated response buffer which is already deallocated during previous command teardwon sequence in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in APQ8098, MSM8909W, Nicobar, QCS405, QCS605, SDA845, SDM660, SDM670, SDM710, SDM845, SDX24, SM6150, SM7150, SM8150, SM8250, SXR2130

Vulnerable Configurations

Part Description Count
OS
Qualcomm
16
Hardware
Qualcomm
16

Common Weakness Enumeration (CWE)

References