PT-2019-11909 · Qualcomm · Msm8940+39
Published
2019-12-18
·
Updated
2019-12-23
·
CVE-2019-10517
CVSS v2.0
4.6
Medium
| Vector | AV:L/AC:L/Au:N/C:P/I:P/A:P |
Name of the Vulnerable Software and Affected Versions
Qualcomm Snapdragon versions (affected versions not specified)
Description
The issue arises when two concurrent threads execute in parallel, causing memory to be freed up twice. This problem affects various Qualcomm Snapdragon products, including Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, and Snapdragon Wearables, across multiple chipsets such as APQ8009, APQ8017, APQ8053, APQ8096, APQ8096AU, APQ8098, MDM9206, MDM9207C, MDM9607, MDM9650, MSM8909, MSM8909W, MSM8917, MSM8920, MSM8937, MSM8939, MSM8940, MSM8996AU, QCS405, QCS605, SDA660, SDA845, SDM630, SDM636, SDM660, SDM845, SDX20, SM6150, SM7150, SM8150, SM8250, SXR1130, and SXR2130.
Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Double Free
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Apq8009
Apq8017
Apq8053
Apq8096
Apq8096Au
Apq8098
Mdm9206
Mdm9207C
Mdm9607
Mdm9650
Msm8909W
Msm8917
Msm8920
Msm8937
Msm8939
Msm8940
Msm8996Au
Qcs405
Qcs605
Sda660
Sda845
Sdm630
Sdm636
Sdm660
Sdm845
Sdx20
Sm6150
Sm7150
Sm8150
Sm8250
Sxr1130
Sxr2130
Snapdragon Auto
Snapdragon Compute
Snapdragon Consumer Iot
Snapdragon Industrial Iot
Snapdragon Iot
Snapdragon Mobile
Snapdragon Voice & Music
Snapdragon Wearables