CVE-2019-10526

—

CVSS 3.1

9.8 critical

EPSS

<1%p58

Published

Mar 5, 2020 (Mar 5, 2020)

Modified

Jun 17, 2026

Description

Out of bound write in WLAN driver due to NULL character not properly placed after SSID name in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music in APQ8009, APQ8017, APQ8053, APQ8096AU, MDM9150, MDM9206, MDM9207C, MDM9607, MDM9640, MDM9650, MSM8917, MSM8920, MSM8937, MSM8940, MSM8953, MSM8996AU, QCA6174A, QCA6574AU, QCA9377, QCA9379, QCN7605, QCS405, QCS605, SC8180X, SDA845, SDM450, SDX20, SDX24, SDX55, SXR1130

Vendors: qualcomm
Products: apq8009 firmware, apq8017 firmware, apq8053 firmware, apq8096au firmware, mdm9150 firmware, mdm9206 firmware, mdm9207c firmware, mdm9607 firmware, mdm9640 firmware, mdm9650 firmware, msm8917 firmware, msm8920 firmware
Weakness: CWE-787
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (0.9%)

In the news0 stories

No ingested article mentions this CVE yet.