ZeroHour

CVE-2019-10589

CVSS 3.1
9.8 critical
EPSS
<1%p58
Published
()
Modified
Description

Lack of length check of response buffer can lead to buffer over-flow while GP command response buffer handling in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking in APQ8017, APQ8053, APQ8098, MDM9206, MDM9607, MSM8917, MSM8920, MSM8937, MSM8940, MSM8953, MSM8998, QM215, SDA660, SDM429, SDM439, SDM450, SDM630, SDM632, SDM636, SDM660

Vendors
qualcomm
Products
apq8017 firmware, apq8053 firmware, apq8098 firmware, mdm9206 firmware, mdm9607 firmware, msm8917 firmware, msm8920 firmware, msm8937 firmware, msm8940 firmware, msm8953 firmware, msm8998 firmware, qm215 firmware
Weakness
CWE-120
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

In the news

No ingested article mentions this CVE yet.