CVE-2019-10517

HIGH

Qualcomm Apq8009 Firmware - Double Free

Title source: rule

Description

Memory is being freed up twice when two concurrent threads are executing in parallel in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in APQ8009, APQ8017, APQ8053, APQ8096, APQ8096AU, APQ8098, MDM9206, MDM9207C, MDM9607, MDM9650, MSM8909, MSM8909W, MSM8917, MSM8920, MSM8937, MSM8939, MSM8940, MSM8996AU, QCS405, QCS605, SDA660, SDA845, SDM630, SDM636, SDM660, SDM845, SDX20, SM6150, SM7150, SM8150, SM8250, SXR1130, SXR2130

References (1)

[Vendor Advisory] https://www.qualcomm.com/company/product-security/bulletins/december-2019-bulletin

Scores

CVSS v3 7.8

EPSS 0.0004

EPSS Percentile 12.9%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Classification

CWE

CWE-415

Status published

Affected Products (33)

qualcomm/apq8009_firmware

qualcomm/apq8017_firmware

qualcomm/apq8053_firmware

qualcomm/apq8096_firmware

qualcomm/apq8096au_firmware

qualcomm/apq8098_firmware

qualcomm/mdm9206_firmware

qualcomm/mdm9207c_firmware

qualcomm/mdm9607_firmware

qualcomm/mdm9650_firmware

qualcomm/msm8909_firmware

qualcomm/msm8909w_firmware

qualcomm/msm8917_firmware

qualcomm/msm8920_firmware

qualcomm/msm8937_firmware

... and 18 more

Timeline

Published Dec 18, 2019

Tracked Since Feb 18, 2026