CVE-2019-10580

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

When kernel thread unregistered listener, Use after free issue happened as the listener client`s private data has been already freed in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in MDM9607, MSM8909W, Nicobar, QCM2150, QCS405, QCS605, Saipan, SC8180X, SDM429W, SDX55, SM8150, SM8250, SXR2130

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-416

Affected software

No affected versions have been published.

Timeline

Published: Jul 30, 2020
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2019

CVE-2019-105819.8NULL is assigned to local instance of audio device pointer after free instead of global static pointer and can lead to use after free issue CVE-2019-105827.8Use after free issue due to using of invalidated iterator to delete an object in sensors HAL in Snapdragon Auto, Snapdragon Consumer IOT, Sn CVE-2019-105837.8Use after free issue occurs when camera access sensors data through direct report mode in Snapdragon Auto, Snapdragon Compute, Snapdragon Co CVE-2019-105847.8Possibility of out of bound access in debug queue, if packet size field is corrupted in Snapdragon Auto, Snapdragon Compute, Snapdragon Conn CVE-2019-105857.8Possible integer overflow happens when mmap find function will increment refcount every time when it invokes and can lead to use after free CVE-2019-105869.8Filling media attribute tag names without validating the destination buffer size which can result in the buffer overflow in Snapdragon Auto,CVE-2019-105879.8Possible Stack overflow can occur when processing a large SDP body or non standard SDP body without right delimiters in Snapdragon Auto, Sna CVE-2019-105889.8Copying RTCP messages into the output buffer without checking the destination buffer size which could lead to a remote stack overflow. in Sn CVE-2019-105899.8Lack of length check of response buffer can lead to buffer over-flow while GP command response buffer handling in Snapdragon Auto, Snapdrago CVE-2019-10597.5A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka 'Scrip CVE-2019-105909.8Out of bound access while parsing dts atom, which is non-standard as it does not have valid number of tracks in Snapdragon Auto, Snapdragon CVE-2019-105917.5Null pointer dereference can happen when parsing udta atom which is non-standard and having invalid depth in Snapdragon Auto, Snapdragon Com