What’s Vulnerable › Vulnerabilities

CVE-2019-10580

• Severity: high (CVSS 7.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2020-07-30 · updated 2026-06-17
• Weakness: CWE-416

Description

When kernel thread unregistered listener, Use after free issue happened as the listener client`s private data has been already freed in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in MDM9607, MSM8909W, Nicobar, QCM2150, QCS405, QCS605, Saipan, SC8180X, SDM429W, SDX55, SM8150, SM8250, SXR2130

Affected products

• Qualcomm Mdm9607 Firmware: all versions
• Qualcomm Msm8909W Firmware: all versions
• Qualcomm Nicobar Firmware: all versions
• Qualcomm Qcm2150 Firmware: all versions
• Qualcomm Qcs405 Firmware: all versions
• Qualcomm Qcs605 Firmware: all versions
• Qualcomm Saipan Firmware: all versions
• Qualcomm Sc8180X Firmware: all versions
• Qualcomm Sdm429W Firmware: all versions
• Qualcomm Sdx55 Firmware: all versions
• Qualcomm Sm8150 Firmware: all versions
• Qualcomm Sm8250 Firmware: all versions
• Qualcomm Sxr2130 Firmware: all versions

References

• https://www.qualcomm.com/company/product-security/bulletins/july-2020-bulletin
• https://www.qualcomm.com/company/product-security/bulletins/july-2020-security-bulletin
• https://www.qualcomm.com/company/product-security/bulletins/july-2020-bulletin

Get alerted when CVE-2019-10580 or the next vulnerability affects your stack