CVE-2019-10488

🗓️ 06 Nov 2019 17:11:15Reported by qualcommType

Null pointer dereference can occur while parsing invalid chunks while playing the nonstandard clip in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in MDM9150, MDM9206, MDM9607, MDM9650, MSM8909W, MSM8996AU, QCA6574AU, QCS405, QCS605, Qualcomm 215, SD 210/SD 212/SD 205, SD 425, SD 427, SD 430, SD 435, SD 439 / SD 429, SD 450, SD 600, SD 615/16/SD 415, SD 625, SD 632, SD 636, SD 665, SD 675, SD 712 / SD 710 / SD 670, SD 730, SD 820, SD 820A, SD 835, SD 845 / SD 850, SD 855, SDA660, SDM439, SDM630, SDM660, SDX2

Reporter	Title	Published	Views	Family All 5
Cvelist	CVE-2019-10488	6 Nov 201917:11	–	cvelist
EUVD	EUVD-2019-2292	7 Oct 202500:30	–	euvd
NVD	CVE-2019-10488	6 Nov 201917:15	–	nvd
Prion	Null pointer dereference	6 Nov 201917:15	–	prion
RedhatCVE	CVE-2019-10488	22 May 202504:14	–	redhatcve

NVD

Node

qualcomm mdm9150_firmwareMatch-

AND

qualcomm mdm9150Match-

Node

qualcomm mdm9206_firmwareMatch-

AND

qualcomm mdm9206Match-

Node

qualcomm mdm9607_firmwareMatch-

AND

qualcomm mdm9607Match-

Node

qualcomm mdm9650_firmwareMatch-

AND

qualcomm mdm9650Match-

Node

qualcomm msm8909w_firmwareMatch-

AND

qualcomm msm8909wMatch-

Node

qualcomm msm8996au_firmwareMatch-

AND

qualcomm msm8996auMatch-

Node

qualcomm qca6574au_firmwareMatch-

AND

qualcomm qca6574auMatch-

Node

qualcomm qcs405_firmwareMatch-

AND

qualcomm qcs405Match-

Node

qualcomm qcs605_firmwareMatch-

AND

qualcomm qcs605Match-

Node

qualcomm qualcomm_215_firmwareMatch-

AND

qualcomm qualcomm_215Match-

Node

qualcomm sd_210_firmwareMatch-

AND

qualcomm sd_210Match-

Node

qualcomm sd_212_firmwareMatch-

AND

qualcomm sd_212Match-

Node

qualcomm sd_205_firmwareMatch-

AND

qualcomm sd_205Match-

Node

qualcomm sd_425_firmwareMatch-

AND

qualcomm sd_425Match-

Node

qualcomm sd_427_firmwareMatch-

AND

qualcomm sd_427Match-

Node

qualcomm sd_430_firmwareMatch-

AND

qualcomm sd_430Match-

Node

qualcomm sd_435_firmwareMatch-

AND

qualcomm sd_435Match-

Node

qualcomm sd_439_firmwareMatch-

AND

qualcomm sd_439Match-

Node

qualcomm sd_429_firmwareMatch-

AND

qualcomm sd_429Match-

Node

qualcomm sd_450_firmwareMatch-

AND

qualcomm sd_450Match-

Node

qualcomm sd_600_firmwareMatch-

AND

qualcomm sd_600Match-

Node

qualcomm sd_615_firmwareMatch-

AND

qualcomm sd_615Match-

Node

qualcomm sd_616_firmwareMatch-

AND

qualcomm sd_616Match-

Node

qualcomm sd_415_firmwareMatch-

AND

qualcomm sd_415Match-

Node

qualcomm sd_625_firmwareMatch-

AND

qualcomm sd_625Match-

Node

qualcomm sd_632_firmwareMatch-

AND

qualcomm sd_632Match-

Node

qualcomm sd_636_firmwareMatch-

AND

qualcomm sd_636Match-

Node

qualcomm sd_665_firmwareMatch-

AND

qualcomm sd_665Match-

Node

qualcomm sd_675_firmwareMatch-

AND

qualcomm sd_675Match-

Node

qualcomm sd_712_firmwareMatch-

AND

qualcomm sd_712Match-

Node

qualcomm sd_710_firmwareMatch-

AND

qualcomm sd_710Match-

Node

qualcomm sd_670_firmwareMatch-

AND

qualcomm sd_670Match-

Node

qualcomm sd_730_firmwareMatch-

AND

qualcomm sd_730Match-

Node

qualcomm sd_820_firmwareMatch-

AND

qualcomm sd_820Match-

Node

qualcomm sd_820a_firmwareMatch-

AND

qualcomm sd_820aMatch-

Node

qualcomm sd_835_firmwareMatch-

AND

qualcomm sd_835Match-

Node

qualcomm sd_845_firmwareMatch-

AND

qualcomm sd_845Match-

Node

qualcomm sd_850_firmwareMatch-

AND

qualcomm sd_850Match-

Node

qualcomm sd_855_firmwareMatch-

AND

qualcomm sd_855Match-

Node

qualcomm sda660_firmwareMatch-

AND

qualcomm sda660Match-

Node

qualcomm sdm439_firmwareMatch-

AND

qualcomm sdm439Match-

Node

qualcomm sdm630_firmwareMatch-

AND

qualcomm sdm630Match-

Node

qualcomm sdm660_firmwareMatch-

AND

qualcomm sdm660Match-

Node

qualcomm sdx20_firmwareMatch-

AND

qualcomm sdx20Match-

[
  {
    "product": "Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables",
    "vendor": "Qualcomm, Inc.",
    "versions": [
      {
        "status": "affected",
        "version": "MDM9150, MDM9206, MDM9607, MDM9650, MSM8909W, MSM8996AU, QCA6574AU, QCS405, QCS605, Qualcomm 215, SD 210/SD 212/SD 205, SD 425, SD 427, SD 430, SD 435, SD 439 / SD 429, SD 450, SD 600, SD 615/16/SD 415, SD 625, SD 632, SD 636, SD 665, SD 675, SD 712 / SD 710 / SD 670, SD 730, SD 820, SD 820A, SD 835, SD 845 / SD 850, SD 855, SDA660, SDM439, SDM630, SDM660, SDX20"
      }
    ]
  }
]

Source	Link
source	www.source.android.com/security/bulletin/

21 Nov 2024 04:19Current

7.7High risk

Vulners AI Score7.7

CVSS 25

CVSS 3.17.5

EPSS0.0044

CWE-476