CVE-2019-10585
—CVSS 3.1
7.8 high
EPSS
<1%p10
Published
()
Modified
Description
Possible integer overflow happens when mmap find function will increment refcount every time when it invokes and can lead to use after free issue in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables in APQ8009, APQ8053, MDM9607, MDM9640, MSM8909W, MSM8917, MSM8953, Nicobar, QCS605, QM215, SDA845, SDM429, SDM429W, SDM439, SDM450, SDM632, SDM660, SDM670, SDM710, SDM845, SDX24, SDX55, SM6150, SM8150, SM8250, SXR1130, SXR2130
- Vendors
- qualcomm
- Products
- apq8009 firmware, apq8053 firmware, mdm9607 firmware, mdm9640 firmware, msm8909w firmware, msm8917 firmware, msm8953 firmware, nicobar firmware, qcs605 firmware, qm215 firmware, sda845 firmware, sdm429 firmware
- Weakness
- CWE-190, CWE-416
- Vector
- CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
In the news0 stories
No ingested article mentions this CVE yet.