ZeroHour

CVE-2019-10549

CVSS 3.1
7.5 high
EPSS
<1%p55
Published
()
Modified
Description

Null pointer dereference issue can happen due to improper validation of CSEQ header response received from network in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables in MSM8905, MSM8909, MSM8917, MSM8920, MSM8937, MSM8940, MSM8953, Nicobar, QCM2150, QM215, Rennell, SC8180X, SDM429, SDM429W, SDM439, SDM450, SDM632, SDX24, SDX55, SM6150, SM7150, SM8150

Vendors
qualcomm
Products
msm8905 firmware, msm8909 firmware, msm8917 firmware, msm8920 firmware, msm8937 firmware, msm8940 firmware, msm8953 firmware, nicobar firmware, qcm2150 firmware, qm215 firmware, rennell firmware, sc8180x firmware
Weakness
CWE-476
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

In the news

No ingested article mentions this CVE yet.