CVE-2019-10542

—

CVSS 3.1

9.8 critical

EPSS

<1%p51

Published

Nov 6, 2019 (Nov 6, 2019)

Modified

Jun 17, 2026

Description

Buffer over-read may occur when downloading a corrupted firmware file that has chunk length in header which doesn`t match the contents in Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music in MDM9150, MDM9206, MDM9607, MDM9615, MDM9640, MDM9650, MSM8996AU, QCA6174A, QCA6574AU, QCA9377, QCA9379, SD 210/SD 212/SD 205, SD 425, SD 427, SD 430, SD 435, SD 450, SD 600, SD 625, SD 712 / SD 710 / SD 670, SD 820, SD 820A, SD 845 / SD 850, SDX20

Vendors: qualcomm
Products: mdm9150 firmware, mdm9206 firmware, mdm9607 firmware, mdm9615 firmware, mdm9640 firmware, mdm9650 firmware, msm8996au firmware, qca6174a firmware, qca6574au firmware, qca9377 firmware, qca9379 firmware, sd 210 firmware
Weakness: CWE-125
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (0.7%)

In the news0 stories

No ingested article mentions this CVE yet.