CVE-2019-10506

—

CVSS 3.1

7.8 high

EPSS

<1%p9

Published

Sep 30, 2019 (Sep 30, 2019)

Modified

Jun 17, 2026

Description

While processing QCA_NL80211_VENDOR_SUBCMD_AVOID_FREQUENCY vendor command, driver does not validate the data obtained from the user space which could be invalid and thus leads to an undesired behaviour in Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile in MDM9206, MDM9607, MSM8996AU, QCA6174A, QCA6574AU, QCA9377, QCA9379, QCS605, SD 600, SD 625, SD 636, SD 665, SD 675, SD 712 / SD 710 / SD 670, SD 730, SD 820, SD 820A, SD 835, SD 845 / SD 850, SD 855, SDM630, SDM660, SDX24

Vendors: qualcomm
Products: mdm9206 firmware, mdm9607 firmware, msm8996au firmware, qca6174a firmware, qca6574au firmware, qca9377 firmware, qca9379 firmware, qcs605 firmware, sd 600 firmware, sd 625 firmware, sd 636 firmware, sd 665 firmware
Weakness: CWE-20
Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (0.2%)

In the news0 stories

No ingested article mentions this CVE yet.