CVE-2019-10585
Summary
| CVE | CVE-2019-10585 |
|---|---|
| State | PUBLIC |
| Assigner | [email protected] |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2020-01-21 07:15:00 UTC |
| Updated | 2020-08-24 17:37:00 UTC |
| Description | Possible integer overflow happens when mmap find function will increment refcount every time when it invokes and can lead to use after free issue in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables in APQ8009, APQ8053, MDM9607, MDM9640, MSM8909W, MSM8917, MSM8953, Nicobar, QCS605, QM215, SDA845, SDM429, SDM429W, SDM439, SDM450, SDM632, SDM660, SDM670, SDM710, SDM845, SDX24, SDX55, SM6150, SM8150, SM8250, SXR1130, SXR2130 |
Risk And Classification
Problem Types: CWE-190 | CWE-416
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Hardware | Qualcomm | Apq8009 | - | All | All | All |
| Hardware | Qualcomm | Apq8009 | - | All | All | All |
| Operating System | Qualcomm | Apq8009 Firmware | - | All | All | All |
| Operating System | Qualcomm | Apq8009 Firmware | - | All | All | All |
| Hardware | Qualcomm | Apq8053 | - | All | All | All |
| Hardware | Qualcomm | Apq8053 | - | All | All | All |
| Operating System | Qualcomm | Apq8053 Firmware | - | All | All | All |
| Operating System | Qualcomm | Apq8053 Firmware | - | All | All | All |
| Hardware | Qualcomm | Mdm9607 | - | All | All | All |
| Hardware | Qualcomm | Mdm9607 | - | All | All | All |
| Operating System | Qualcomm | Mdm9607 Firmware | - | All | All | All |
| Operating System | Qualcomm | Mdm9607 Firmware | - | All | All | All |
| Hardware | Qualcomm | Mdm9640 | - | All | All | All |
| Hardware | Qualcomm | Mdm9640 | - | All | All | All |
| Operating System | Qualcomm | Mdm9640 Firmware | - | All | All | All |
| Operating System | Qualcomm | Mdm9640 Firmware | - | All | All | All |
| Hardware | Qualcomm | Msm8909w | - | All | All | All |
| Hardware | Qualcomm | Msm8909w | - | All | All | All |
| Operating System | Qualcomm | Msm8909w Firmware | - | All | All | All |
| Operating System | Qualcomm | Msm8909w Firmware | - | All | All | All |
| Hardware | Qualcomm | Msm8917 | - | All | All | All |
| Hardware | Qualcomm | Msm8917 | - | All | All | All |
| Operating System | Qualcomm | Msm8917 Firmware | - | All | All | All |
| Operating System | Qualcomm | Msm8917 Firmware | - | All | All | All |
| Hardware | Qualcomm | Msm8953 | - | All | All | All |
| Hardware | Qualcomm | Msm8953 | - | All | All | All |
| Operating System | Qualcomm | Msm8953 Firmware | - | All | All | All |
| Operating System | Qualcomm | Msm8953 Firmware | - | All | All | All |
| Hardware | Qualcomm | Nicobar | - | All | All | All |
| Hardware | Qualcomm | Nicobar | - | All | All | All |
| Operating System | Qualcomm | Nicobar Firmware | - | All | All | All |
| Operating System | Qualcomm | Nicobar Firmware | - | All | All | All |
| Hardware | Qualcomm | Qcs605 | - | All | All | All |
| Hardware | Qualcomm | Qcs605 | - | All | All | All |
| Operating System | Qualcomm | Qcs605 Firmware | - | All | All | All |
| Operating System | Qualcomm | Qcs605 Firmware | - | All | All | All |
| Hardware | Qualcomm | Qm215 | - | All | All | All |
| Hardware | Qualcomm | Qm215 | - | All | All | All |
| Operating System | Qualcomm | Qm215 Firmware | - | All | All | All |
| Operating System | Qualcomm | Qm215 Firmware | - | All | All | All |
| Hardware | Qualcomm | Sda845 | - | All | All | All |
| Hardware | Qualcomm | Sda845 | - | All | All | All |
| Operating System | Qualcomm | Sda845 Firmware | - | All | All | All |
| Operating System | Qualcomm | Sda845 Firmware | - | All | All | All |
| Hardware | Qualcomm | Sdm429 | - | All | All | All |
| Hardware | Qualcomm | Sdm429 | - | All | All | All |
| Hardware | Qualcomm | Sdm429w | - | All | All | All |
| Hardware | Qualcomm | Sdm429w | - | All | All | All |
| Operating System | Qualcomm | Sdm429w Firmware | - | All | All | All |
| Operating System | Qualcomm | Sdm429w Firmware | - | All | All | All |
| Operating System | Qualcomm | Sdm429 Firmware | - | All | All | All |
| Operating System | Qualcomm | Sdm429 Firmware | - | All | All | All |
| Hardware | Qualcomm | Sdm439 | - | All | All | All |
| Hardware | Qualcomm | Sdm439 | - | All | All | All |
| Operating System | Qualcomm | Sdm439 Firmware | - | All | All | All |
| Operating System | Qualcomm | Sdm439 Firmware | - | All | All | All |
| Hardware | Qualcomm | Sdm450 | - | All | All | All |
| Hardware | Qualcomm | Sdm450 | - | All | All | All |
| Operating System | Qualcomm | Sdm450 Firmware | - | All | All | All |
| Operating System | Qualcomm | Sdm450 Firmware | - | All | All | All |
| Hardware | Qualcomm | Sdm632 | - | All | All | All |
| Hardware | Qualcomm | Sdm632 | - | All | All | All |
| Operating System | Qualcomm | Sdm632 Firmware | - | All | All | All |
| Operating System | Qualcomm | Sdm632 Firmware | - | All | All | All |
| Hardware | Qualcomm | Sdm660 | - | All | All | All |
| Hardware | Qualcomm | Sdm660 | - | All | All | All |
| Operating System | Qualcomm | Sdm660 Firmware | - | All | All | All |
| Operating System | Qualcomm | Sdm660 Firmware | - | All | All | All |
| Hardware | Qualcomm | Sdm670 | - | All | All | All |
| Hardware | Qualcomm | Sdm670 | - | All | All | All |
| Operating System | Qualcomm | Sdm670 Firmware | - | All | All | All |
| Operating System | Qualcomm | Sdm670 Firmware | - | All | All | All |
| Hardware | Qualcomm | Sdm710 | - | All | All | All |
| Hardware | Qualcomm | Sdm710 | - | All | All | All |
| Operating System | Qualcomm | Sdm710 Firmware | - | All | All | All |
| Operating System | Qualcomm | Sdm710 Firmware | - | All | All | All |
| Hardware | Qualcomm | Sdm845 | - | All | All | All |
| Hardware | Qualcomm | Sdm845 | - | All | All | All |
| Operating System | Qualcomm | Sdm845 Firmware | - | All | All | All |
| Operating System | Qualcomm | Sdm845 Firmware | - | All | All | All |
| Hardware | Qualcomm | Sdx24 | - | All | All | All |
| Hardware | Qualcomm | Sdx24 | - | All | All | All |
| Operating System | Qualcomm | Sdx24 Firmware | - | All | All | All |
| Operating System | Qualcomm | Sdx24 Firmware | - | All | All | All |
| Hardware | Qualcomm | Sdx55 | - | All | All | All |
| Hardware | Qualcomm | Sdx55 | - | All | All | All |
| Operating System | Qualcomm | Sdx55 Firmware | - | All | All | All |
| Operating System | Qualcomm | Sdx55 Firmware | - | All | All | All |
| Hardware | Qualcomm | Sm6150 | - | All | All | All |
| Hardware | Qualcomm | Sm6150 | - | All | All | All |
| Operating System | Qualcomm | Sm6150 Firmware | - | All | All | All |
| Operating System | Qualcomm | Sm6150 Firmware | - | All | All | All |
| Hardware | Qualcomm | Sm8150 | - | All | All | All |
| Hardware | Qualcomm | Sm8150 | - | All | All | All |
| Operating System | Qualcomm | Sm8150 Firmware | - | All | All | All |
| Operating System | Qualcomm | Sm8150 Firmware | - | All | All | All |
| Hardware | Qualcomm | Sm8250 | - | All | All | All |
| Hardware | Qualcomm | Sm8250 | - | All | All | All |
| Operating System | Qualcomm | Sm8250 Firmware | - | All | All | All |
| Operating System | Qualcomm | Sm8250 Firmware | - | All | All | All |
| Hardware | Qualcomm | Sxr1130 | - | All | All | All |
| Hardware | Qualcomm | Sxr1130 | - | All | All | All |
| Operating System | Qualcomm | Sxr1130 Firmware | - | All | All | All |
| Operating System | Qualcomm | Sxr1130 Firmware | - | All | All | All |
| Hardware | Qualcomm | Sxr2130 | - | All | All | All |
| Hardware | Qualcomm | Sxr2130 | - | All | All | All |
| Operating System | Qualcomm | Sxr2130 Firmware | - | All | All | All |
| Operating System | Qualcomm | Sxr2130 Firmware | - | All | All | All |
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| January 2020 Security Bulletin | Qualcomm | CONFIRM | www.qualcomm.com | Patch, Vendor Advisory |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.