VULNERABILITY INTELLIGENCE
CVE-2019-10580
CVSS score7.8 HIGH
EPSS probability0.21%
CISA KEVNot currently listed
Published2020-07-30
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Description
When kernel thread unregistered listener, Use after free issue happened as the listener client`s private data has been already freed in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in MDM9607, MSM8909W, Nicobar, QCM2150, QCS405, QCS605, Saipan, SC8180X, SDM429W, SDX55, SM8150, SM8250, SXR2130
Weakness classification
- nvd@nist.gov: CWE-416
Primary references
- product-security@qualcomm.com — Broken Link
- nvd@nist.gov — Patch, Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Broken Link