HIGH · 7.8

CVE-2019-10603

Use after free issue occurs If the real device interface goes down and a route lookup is performed while sending a raw IPv6 message in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electron...

Vulnerability Description

Use after free issue occurs If the real device interface goes down and a route lookup is performed while sending a raw IPv6 message in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in APQ8053, APQ8096AU, APQ8098, MDM9206, MDM9207C, MDM9607, MDM9640, MDM9650, MSM8917, MSM8937, MSM8996AU, QCN7605, SDA845, SDM630, SDM636, SDM660, SDX20, SXR1130

CVSS Score

7.8

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
HIGH
Availability
HIGH

Affected Products

VendorProductVersions
QualcommApq8053 Firmware-
QualcommApq8053-
QualcommApq8096Au Firmware-
QualcommApq8096Au-
QualcommApq8098 Firmware-
QualcommApq8098-
QualcommMdm9206 Firmware-
QualcommMdm9206-
QualcommMdm9207C Firmware-
QualcommMdm9207C-
QualcommMdm9607 Firmware-
QualcommMdm9607-
QualcommMdm9640 Firmware-
QualcommMdm9640-
QualcommMdm9650 Firmware-
QualcommMdm9650-
QualcommMsm8917 Firmware-
QualcommMsm8917-
QualcommMsm8937 Firmware-
QualcommMsm8937-

Related Weaknesses (CWE)

References

FAQ

What is CVE-2019-10603?

CVE-2019-10603 is a vulnerability with a CVSS score of 7.8 (HIGH). Use after free issue occurs If the real device interface goes down and a route lookup is performed while sending a raw IPv6 message in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electron...

How severe is CVE-2019-10603?

CVE-2019-10603 has been rated HIGH with a CVSS base score of 7.8/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2019-10603?

Check the references section above for vendor advisories and patch information. Affected products include: Qualcomm Apq8053 Firmware, Qualcomm Apq8053, Qualcomm Apq8096Au Firmware, Qualcomm Apq8096Au, Qualcomm Apq8098 Firmware.