CVE-2019-10580: Qualcomm MDM9607 Firmware

High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days.

When kernel thread unregistered listener, Use after free issue happened as the listener client`s private data has been already freed in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in MDM9607, MSM8909W, Nicobar, QCM2150, QCS405, QCS605, Saipan, SC8180X, SDM429W, SDX55, SM8150, SM8250, SXR2130

Affected products

• Qualcomm MDM9607 Firmware: affected versions not specified
• Qualcomm MSM8909W Firmware: affected versions not specified
• Qualcomm Nicobar Firmware: affected versions not specified
• Qualcomm QCM2150 Firmware: affected versions not specified
• Qualcomm QCS405 Firmware: affected versions not specified
• Qualcomm QCS605 Firmware: affected versions not specified
• Qualcomm Saipan Firmware: affected versions not specified
• Qualcomm SC8180X Firmware: affected versions not specified
• Qualcomm SDM429W Firmware: affected versions not specified
• Qualcomm SDX55 Firmware: affected versions not specified
• Qualcomm SM8150 Firmware: affected versions not specified
• Qualcomm SM8250 Firmware: affected versions not specified
• Qualcomm SXR2130 Firmware: affected versions not specified

Published 2020-07-30. Last modified 2026-06-17.