CVE-2019-10585

HIGH

Qualcomm Multiple Chipsets Firmware - Use-After-Free via Integer Overflow in mmap

Title source: llm
STIX 2.1

Description

Possible integer overflow happens when mmap find function will increment refcount every time when it invokes and can lead to use after free issue in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables in APQ8009, APQ8053, MDM9607, MDM9640, MSM8909W, MSM8917, MSM8953, Nicobar, QCS605, QM215, SDA845, SDM429, SDM429W, SDM439, SDM450, SDM632, SDM660, SDM670, SDM710, SDM845, SDX24, SDX55, SM6150, SM8150, SM8250, SXR1130, SXR2130

References (1)

Core 1
Core References

Scores

CVSS v3 7.8
EPSS 0.0004
EPSS Percentile 11.2%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Details

CWE
CWE-190 CWE-416
Status published
Products (27)
qualcomm/apq8009_firmware
qualcomm/apq8053_firmware
qualcomm/mdm9607_firmware
qualcomm/mdm9640_firmware
qualcomm/msm8909w_firmware
qualcomm/msm8917_firmware
qualcomm/msm8953_firmware
qualcomm/nicobar_firmware
qualcomm/qcs605_firmware
qualcomm/qm215_firmware
... and 17 more
Published Jan 21, 2020
Tracked Since Feb 18, 2026