What is CVE-2019-10528?

CVE-2019-10528 is a critical-severity vulnerability in Qualcomm Mdm9206, classified under Use After Free. CVSS score: 9.8/10. Published 2019-11-06.

How severe is CVE-2019-10528?

Critical severity. CVSS v3 base score is 9.8 out of 10.

Use After Free in Qualcomm Mdm9206

CVE-2019-10528

Use after free issue in kernel while accessing freed mdlog session info and its attributes after closing the session in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdr…

Vulnerability class: Use-After-Free

EPSS: 0.007 (48.7th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 9.8 (Critical). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H.

Affected products

Qualcomm Mdm9206
Qualcomm Mdm9206_firmware
Qualcomm Mdm9607
Qualcomm Mdm9607_firmware
Qualcomm Mdm9640
Qualcomm Mdm9640_firmware
Qualcomm Mdm9650
Qualcomm Mdm9650_firmware
Qualcomm Msm8909w
Qualcomm Msm8909w_firmware

Weakness classification (CWE)

CWE-416 — Use After Free

References

product-security@qualcomm.com (x_refsource_CONFIRM, Patch, Vendor Advisory)

Frequently asked questions

What is CVE-2019-10528?: CVE-2019-10528 is a critical-severity vulnerability in Qualcomm Mdm9206, classified under Use After Free. CVSS score: 9.8/10. Published 2019-11-06.
How severe is CVE-2019-10528?: Critical severity. CVSS v3 base score is 9.8 out of 10.