CVE-2019-10581: Use After Free
NULL is assigned to local instance of audio device pointer after free instead of global static pointer and can lead to use after free issue in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in APQ8009, APQ8053, MDM9206, MDM9207C, MDM9607, MSM8909W, MSM8917, MSM8920, MSM8937, MSM8940, MSM8998, Nicobar, QCS605, Rennell, SA6155P, SDM630, SDM636, SDM660, SDM670, SDM710, SDM845, SDX24, SDX55, SM6150, SM7150, SM8150, SM8250, SXR2130
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2019-10581?
CVE-2019-10581 has a severity rating of critical due to its potential to lead to a use-after-free vulnerability.
How do I fix CVE-2019-10581?
To fix CVE-2019-10581, you should update to the latest firmware version provided by Qualcomm that addresses this vulnerability.
What impact does CVE-2019-10581 have on affected devices?
CVE-2019-10581 can lead to unauthorized access or control of the affected devices, potentially compromising user data.
Which devices are affected by CVE-2019-10581?
CVE-2019-10581 affects several Qualcomm Snapdragon devices across categories like Automotive, IoT, Mobile, and Wearables.
What should users do if they cannot update their device against CVE-2019-10581?
If users cannot update their device, they should consider limiting exposure to potential threats until a patch is available.