CVE-2019-10529: Use After Free
Possible use after free issue due to race condition while attempting to mark the entry pages as dirty using function setpagedirty() in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in MDM9150, MDM9206, MDM9607, MDM9640, MDM9650, MSM8909W, MSM8996AU, QCS405, QCS605, Qualcomm 215, SD 210/SD 212/SD 205, SD 425, SD 439 / SD 429, SD 450, SD 615/16/SD 415, SD 625, SD 632, SD 636, SD 665, SD 675, SD 712 / SD 710 / SD 670, SD 730, SD 820, SD 820A, SD 835, SD 845 / SD 850, SD 855, SDA660, SDM439, SDM630, SDM660, SDX20, SDX24
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2019-10529?
The CVE-2019-10529 vulnerability has a medium severity rating as it involves a possible use after free issue due to a race condition.
How do I fix CVE-2019-10529?
To fix CVE-2019-10529, update the affected Qualcomm firmware or Android version to the latest security patch that addresses this vulnerability.
Which products are affected by CVE-2019-10529?
CVE-2019-10529 affects various Qualcomm products including MDM9150, MDM9206, MDM9607, and several Snapdragon models.
Was CVE-2019-10529 publicly disclosed?
Yes, CVE-2019-10529 was publicly disclosed as part of the Android security bulletin in September 2019.
What type of vulnerability is CVE-2019-10529?
CVE-2019-10529 is classified as a use after free vulnerability, which can lead to memory corruption and potential exploitation.