ZeroHour
DashboardNewsCVEsExploitsIncidentsAIBriefAnalyticsEntitiesWatchlistIOCsAsk the feedSourcesFeeds & APIKiosk mode

CVE-2019-10535

—
CVSS 3.1
5.5 medium
EPSS
<1%p7
Published
()
Modified
Description

Improper validation for loop variable received from firmware can lead to out of bound access in WLAN function while iterating through loop in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music in APQ8053, APQ8096AU, APQ8098, MDM9640, MSM8996AU, MSM8998, QCA6574AU, QCN7605, QCS405, QCS605, SDA845, SDM845, SDX20

Vendors
qualcomm
Products
apq8053 firmware, apq8096au firmware, apq8098 firmware, mdm9640 firmware, msm8996au firmware, msm8998 firmware, qca6574au firmware, qcn7605 firmware, qcs405 firmware, qcs605 firmware, sda845 firmware, sdm845 firmware
Weakness
CWE-20, CWE-119
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
NVD CVE.org GitHub PoCs EPSS (0.2%)

In the news

No ingested article mentions this CVE yet.