ZeroHour
DashboardNewsCVEsExploitsIncidentsAIBriefAnalyticsEntitiesWatchlistIOCsAsk the feedSourcesFeeds & APIKiosk mode

CVE-2019-10624

—
CVSS 3.1
7.8 high
EPSS
<1%p9
Published
()
Modified
Description

While handling the vendor command there is an integer truncation issue that could yield a buffer overflow due to int data type copied to u8 data type in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile in APQ8096AU, MSM8996AU, QCA6574AU, QCN7605, Rennell, SC8180X, SDM710, SDX55, SM7150, SM8150, SM8250, SXR2130

Vendors
qualcomm
Products
apq8096au firmware, msm8996au firmware, qca6574au firmware, qcn7605 firmware, rennell firmware, sc8180x firmware, sdm710 firmware, sdx55 firmware, sm7150 firmware, sm8150 firmware, sm8250 firmware, sxr2130 firmware
Weakness
CWE-119, CWE-681
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
NVD CVE.org GitHub PoCs EPSS (0.2%)

In the news

No ingested article mentions this CVE yet.