CVE-2019-10529

Possible use after free issue due to race condition while attempting to mark the entry pages as dirty using function set_page_dirty() in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in MDM9150, MDM9206, MDM9607, MDM9640, MDM9650, MSM8909W, MSM8996AU, QCS405, QCS605, Qualcomm 215, SD 210/SD 212/SD 205, SD 425, SD 439 / SD 429, SD 450, SD 615/16/SD 415, SD 625, SD 632, SD 636, SD 665, SD 675, SD 712 / SD 710 / SD 670, SD 730, SD 820, SD 820A, SD 835, SD 845 / SD 850, SD 855, SDA660, SDM439, SDM630, SDM660, SDX20, SDX24

Affected products

Qualcomm 215, Qualcomm Mdm9206, Qualcomm Mdm9607, Qualcomm Mdm9640, Qualcomm Mdm9650, Qualcomm Msm8909W, Qualcomm Msm8996Au, Qualcomm Qcs405

Qualcomm mdm9150 Firmware

All versions

Fix

Available

CVSS 2.0

9.3 HIGH

CVSS 3.1

8.1 HIGH

EPSS

1.7% (76th percentile)

Weakness

CWE-362, CWE-416

NVD status

Modified

Published

2019-11-06