CVE-2019-10507

🗓️ 30 Sep 2019 15:40:34Reported by qualcommType

Lack of check of extscan change results received from firmware can lead to an out of buffer read in Snapdragon Auto, Snapdragon Consumer Electronics and mor

Reporter	Title	Published	Views	Family All 5
Cvelist	CVE-2019-10507	30 Sep 201915:40	–	cvelist
EUVD	EUVD-2019-2311	7 Oct 202500:30	–	euvd
NVD	CVE-2019-10507	30 Sep 201916:15	–	nvd
Prion	Code injection	30 Sep 201916:15	–	prion
RedhatCVE	CVE-2019-10507	22 May 202504:14	–	redhatcve

NVD

Node

qualcomm mdm9150_firmwareMatch-

AND

qualcomm mdm9150Match-

Node

qualcomm mdm9206_firmwareMatch-

AND

qualcomm mdm9206Match-

Node

qualcomm mdm9607_firmwareMatch-

AND

qualcomm mdm9607Match-

Node

qualcomm mdm9640_firmwareMatch-

AND

qualcomm mdm9640Match-

Node

qualcomm mdm9650_firmwareMatch-

AND

qualcomm mdm9650Match-

Node

qualcomm msm8996au_firmwareMatch-

AND

qualcomm msm8996auMatch-

Node

qualcomm qca6174a_firmwareMatch-

AND

qualcomm qca6174aMatch-

Node

qualcomm qca6574au_firmwareMatch-

AND

qualcomm qca6574auMatch-

Node

qualcomm qca9377_firmwareMatch-

AND

qualcomm qca9377Match-

Node

qualcomm qca9379_firmwareMatch-

AND

qualcomm qca9379Match-

Node

qualcomm qcs605_firmwareMatch-

AND

qualcomm qcs605Match-

Node

qualcomm sd_210_firmwareMatch-

AND

qualcomm sd_210Match-

Node

qualcomm sd_212_firmwareMatch-

AND

qualcomm sd_212Match-

Node

qualcomm sd_205_firmwareMatch-

AND

qualcomm sd_205Match-

Node

qualcomm sd_425_firmwareMatch-

AND

qualcomm sd_425Match-

Node

qualcomm sd_430_firmwareMatch-

AND

qualcomm sd_430Match-

Node

qualcomm sd_600_firmwareMatch-

AND

qualcomm sd_600Match-

Node

qualcomm sd_625_firmwareMatch-

AND

qualcomm sd_625Match-

Node

qualcomm sd_636_firmwareMatch-

AND

qualcomm sd_636Match-

Node

qualcomm sd_665_firmwareMatch-

AND

qualcomm sd_665Match-

Node

qualcomm sd_675_firmwareMatch-

AND

qualcomm sd_675Match-

Node

qualcomm sd_712_firmwareMatch-

AND

qualcomm sd_712Match-

Node

qualcomm sd_710_firmwareMatch-

AND

qualcomm sd_710Match-

Node

qualcomm sd_670_firmwareMatch-

AND

qualcomm sd_670Match-

Node

qualcomm sd_730_firmwareMatch-

AND

qualcomm sd_730Match-

Node

qualcomm sd_820a_firmwareMatch-

AND

qualcomm sd_820aMatch-

Node

qualcomm sd_835_firmwareMatch-

AND

qualcomm sd_835Match-

Node

qualcomm sd_845_firmwareMatch-

AND

qualcomm sd_845Match-

Node

qualcomm sd_850_firmwareMatch-

AND

qualcomm sd_850Match-

Node

qualcomm sd_855_firmwareMatch-

AND

qualcomm sd_855Match-

Node

qualcomm sda660_firmwareMatch-

AND

qualcomm sda660Match-

Node

qualcomm sdm630_firmwareMatch-

AND

qualcomm sdm630Match-

Node

qualcomm sdm660_firmwareMatch-

AND

qualcomm sdm660Match-

Node

qualcomm sdx20_firmwareMatch-

AND

qualcomm sdx20Match-

Node

qualcomm sdx24_firmwareMatch-

AND

qualcomm sdx24Match-

[
  {
    "product": "Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music",
    "vendor": "Qualcomm, Inc.",
    "versions": [
      {
        "status": "affected",
        "version": "MDM9150, MDM9206, MDM9607, MDM9640, MDM9650, MSM8996AU, QCA6174A, QCA6574AU, QCA9377, QCA9379, QCS605, SD 210/SD 212/SD 205, SD 425, SD 430, SD 600, SD 625, SD 636, SD 665, SD 675, SD 712 / SD 710 / SD 670, SD 730, SD 820A, SD 835, SD 845 / SD 850, SD 855, SDA660, SDM630, SDM660, SDX20, SDX24"
      }
    ]
  }
]

Source	Link
codeaurora	www.codeaurora.org/security-bulletin/2019/08/05/august-2019-code-aurora-security-bulletin

21 Nov 2024 04:19Current

8.2High risk

Vulners AI Score8.2

CVSS 24.6

CVSS 3.17.8

EPSS0.00042

CWE-125