CVE-2019-10580
7.8 highEPSS 0.2%
High (7.8) in qualcomm. EPSS 0.2% chance of exploitation in the next 30 days.
When kernel thread unregistered listener, Use after free issue happened as the listener client`s private data has been already freed in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in MDM9607, MSM8909W, Nicobar, QCM2150, QCS405, QCS605, Saipan, SC8180X, SDM429W, SDX55, SM8150, SM8250, SXR2130
Severity
CVSS 3.1
7.8 highCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H- EPSS
- 0.2% chance of exploitation in the next 30 days; higher than 10% of CVEs (scores of 2026-10-31)
- CWE
- CWE-416
- Published
- Modified
- Record from
- the NVD, synced
Affected
- qualcomm:mdm9607_firmware
- qualcomm:msm8909w_firmware
- qualcomm:nicobar_firmware
- qualcomm:qcm2150_firmware
- qualcomm:qcs405_firmware
- qualcomm:qcs605_firmware
- qualcomm:saipan_firmware
- qualcomm:sc8180x_firmware
- qualcomm:sdm429w_firmware
- qualcomm:sdx55_firmware
- qualcomm:sm8150_firmware
- qualcomm:sm8250_firmware
- qualcomm:sxr2130_firmware
References
Check your stackJSON