CVE-2019-10548

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

While trying to obtain datad ipc handle during DPL initialization, Heap use-after-free issue can occur if modem SSR occurs at same time in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Wearables in APQ8009, APQ8053, APQ8096AU, MSM8905, MSM8909, MSM8909W, MSM8917, MSM8920, MSM8937, MSM8939, MSM8940, MSM8953, MSM8996AU, MSM8998, Nicobar, QCA6574AU, QCS605, QM215, SDA660, SDM429, SDM429W, SDM439, SDM450, SDM630, SDM632, SDM636, SDM660, SDM670, SDM710, SDM845, SM6150, SM7150, SM8150, SXR1130

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-416

Affected software

No affected versions have been published.

Timeline

Published: Jan 21, 2020
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2019

CVE-2019-105497.5Null pointer dereference issue can happen due to improper validation of CSEQ header response received from network in Snapdragon Auto, Snapd CVE-2019-10557.5A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers. The vulnerabil CVE-2019-105509.1Buffer Over-read when UE is trying to process the message received form the network without zero termination in Snapdragon Auto, Snapdragon CVE-2019-105519.1String error while processing non standard SIP messages received can lead to buffer overread and then denial of service in Snapdragon Auto, CVE-2019-105529.1Multiple Buffer Over-read issue can happen due to improper length checks while decoding Service Reject/RAU Reject/PTMSI Realloc cmd in Snapd CVE-2019-105539.1Multiple Read overflows due to improper length checks while decoding authentication in Cs domain/RAU Reject and TC cmd in Snapdragon Auto, S CVE-2019-105549.1Multiple Read overflows issue due to improper length check while decoding Identity Request in CSdomain/Authentication Reject in CS domain/ P CVE-2019-105557.8Buffer overflow can occur due to usage of wrong datatype and missing length check before copying into buffer in Snapdragon Auto, Snapdragon CVE-2019-105567.8Missing length check before copying the data from kernel space to userspace through the copy function can lead to buffer overflow in some ca CVE-2019-105579.8Out-of-bound read in the wireless driver in the Linux kernel due to lack of check of buffer length. in Snapdragon Auto, Snapdragon Consumer CVE-2019-105587.8While transferring data from APPS to DSP, Out of bound in FastRPC HLOS Driver due to the data buffer which can be controlled by DSP in Snapd CVE-2019-105599.8Accessing data buffer beyond the available data while parsing ogg clip can lead to null-pointer dereference and then memory corruption in Sn