CVE-2019-10484: Qualcomm APQ8098 Firmware

Medium severity, CVSS 5.5. EPSS: 0.2% chance of exploitation in the next 30 days.

Use after free issue occurs when command destructors access dynamically allocated response buffer which is already deallocated during previous command teardwon sequence in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in APQ8098, MSM8909W, Nicobar, QCS405, QCS605, SDA845, SDM660, SDM670, SDM710, SDM845, SDX24, SM6150, SM7150, SM8150, SM8250, SXR2130

Affected products

• Qualcomm APQ8098 Firmware: affected versions not specified
• Qualcomm MSM8909W Firmware: affected versions not specified
• Qualcomm Nicobar Firmware: affected versions not specified
• Qualcomm QCS405 Firmware: affected versions not specified
• Qualcomm QCS605 Firmware: affected versions not specified
• Qualcomm SDA845 Firmware: affected versions not specified
• Qualcomm SDM660 Firmware: affected versions not specified
• Qualcomm SDM670 Firmware: affected versions not specified
• Qualcomm SDM710 Firmware: affected versions not specified
• Qualcomm SDM845 Firmware: affected versions not specified
• Qualcomm SDX24 Firmware: affected versions not specified
• Qualcomm SM6150 Firmware: affected versions not specified
• Qualcomm SM7150 Firmware: affected versions not specified
• Qualcomm SM8150 Firmware: affected versions not specified
• Qualcomm SM8250 Firmware: affected versions not specified
• Qualcomm SXR2130 Firmware: affected versions not specified

Published 2019-12-12. Last modified 2026-06-17.