CVE-2019-10612

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

UTCB object has a function pointer called by the reaper to deallocate its memory resources and this address can potentially be corrupted by stack overflow in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wired Infrastructure and Networking in MDM9205, MDM9650, QCS605, SA6155P, SC8180X, SDA845, SDM670, SDM710, SDM845, SDM850, SDX55, SM6150, SM7150, SM8150, SM8250, SXR1130, SXR2130

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-787

Affected software

No affected versions have been published.

Timeline

Published: Mar 5, 2020
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2019

CVE-2019-106149.8Out of boundary access is possible as there is no validation of data accessed against the received size of the packet in case of malicious f CVE-2019-106157.8u'Possibility of integer overflow in keymaster 4 while allocating memory due to multiplication of large numcerts value and size of keymaster CVE-2019-106165.5Possibility of null pointer access if the SPDM commands are executed in the non-standard way in TZ. in Snapdragon Auto, Snapdragon Compute, CVE-2019-106177.8Low privilege users can access service configuration which contains registry data that admins uses to create or delete entries in the regist CVE-2019-106185.5Driver may access an invalid address while processing IO control due to lack of check of address validation in Snapdragon Connectivity in QC CVE-2019-10627.5A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'C CVE-2019-106207.8Kernel memory error in debug module due to improper check of user data length before copying into memory in Snapdragon Auto, Snapdragon Cons CVE-2019-106217.8Use after free issue when MAP and UNMAP calls at same time as data structure used my MAP may be freed by UNMAP function in Snapdragon Auto, CVE-2019-106229.1Out of bound memory access can happen while parsing ADSP message due to lack of check of size of payload received from userspace in Snapdrag CVE-2019-106237.1Possible integer overflow can happen in host driver while processing user controlled string due to improper validation on data received. in CVE-2019-106247.8While handling the vendor command there is an integer truncation issue that could yield a buffer overflow due to int data type copied to u8 CVE-2019-106257.1Out of bound access in diag services when DCI command buffer reallocation is not done properly with required capacity in Snapdragon Auto, Sn