CVE-2019-10595

🗓️ 18 Dec 2019 05:25:47Reported by qualcommType

Possible buffer overwrite in message handler due to lack of validation of tid value calculated from packets received from firmware in Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking in APQ8009, APQ8053, APQ8064, APQ8096AU, IPQ4019, IPQ8064, MDM9206, MDM9207C, MDM9607, MDM9615, MDM9640, MDM9650, MSM8909, MSM8909W, MSM8939, MSM8996AU, QCA4531, QCA6174A, QCA6574AU, QCA9377, QCA9379, QCA9558, QCA9880, QCA9886, QCA9980, SDA660, SDM630, SDM636, SDM660, SDX20, SDX2

Reporter	Title	Published	Views	Family All 8
Android Security Bulletins	Android Security Bulletin—December 2019Stay organized with collectionsSave and categorize content based on your preferences.	2 Dec 201900:00	–	androidsecurity
Circl	CVE-2019-10595	11 Dec 201903:00	–	circl
CNVD	Input Validation Error Vulnerability in Multiple Qualcomm Products (CNVD-2020-03576)	25 Dec 201900:00	–	cnvd
Cvelist	CVE-2019-10595	18 Dec 201905:25	–	cvelist
EUVD	EUVD-2019-2399	7 Oct 202500:30	–	euvd
NVD	CVE-2019-10595	18 Dec 201906:15	–	nvd
Prion	Buffer overflow	18 Dec 201906:15	–	prion
RedhatCVE	CVE-2019-10595	22 May 202504:15	–	redhatcve

NVD

Node

qualcomm apq8009_firmwareMatch-

AND

qualcomm apq8009Match-

Node

qualcomm apq8053_firmwareMatch-

AND

qualcomm apq8053Match-

Node

qualcomm apq8064_firmwareMatch-

AND

qualcomm apq8064Match-

Node

qualcomm apq8096au_firmwareMatch-

AND

qualcomm apq8096auMatch-

Node

qualcomm ipq4019_firmwareMatch-

AND

qualcomm ipq4019Match-

Node

qualcomm ipq8064_firmwareMatch-

AND

qualcomm ipq8064Match-

Node

qualcomm mdm9206_firmwareMatch-

AND

qualcomm mdm9206Match-

Node

qualcomm mdm9207c_firmwareMatch-

AND

qualcomm mdm9207cMatch-

Node

qualcomm mdm9607_firmwareMatch-

AND

qualcomm mdm9607Match-

Node

qualcomm mdm9615_firmwareMatch-

AND

qualcomm mdm9615Match-

Node

qualcomm mdm9640_firmwareMatch-

AND

qualcomm mdm9640Match-

Node

qualcomm mdm9650_firmwareMatch-

AND

qualcomm mdm9650Match-

Node

qualcomm msm8909_firmwareMatch-

AND

qualcomm msm8909Match-

Node

qualcomm msm8909_firmwareMatch-

AND

qualcomm msm8909Match-

Node

qualcomm msm8939_firmwareMatch-

AND

qualcomm msm8939Match-

Node

qualcomm msm8996au_firmwareMatch-

AND

qualcomm msm8996auMatch-

Node

qualcomm qca4531_firmwareMatch-

AND

qualcomm qca4531Match-

Node

qualcomm qca6174a_firmwareMatch-

AND

qualcomm qca6174aMatch-

Node

qualcomm qca6574au_firmwareMatch-

AND

qualcomm qca6574auMatch-

Node

qualcomm qca9377_firmwareMatch-

AND

qualcomm qca9377Match-

Node

qualcomm qca9379_firmwareMatch-

AND

qualcomm qca9379Match-

Node

qualcomm qca9558_firmwareMatch-

AND

qualcomm qca9558Match-

Node

qualcomm qca9880_firmwareMatch-

AND

qualcomm qca9880Match-

Node

qualcomm qca9886_firmwareMatch-

AND

qualcomm qca9886Match-

Node

qualcomm qca9980_firmwareMatch-

AND

qualcomm qca9980Match-

Node

qualcomm sda660_firmwareMatch-

AND

qualcomm sda660Match-

Node

qualcomm sdm630_firmwareMatch-

AND

qualcomm sdm630Match-

Node

qualcomm sdm636_firmwareMatch-

AND

qualcomm sdm636Match-

Node

qualcomm sdm660_firmwareMatch-

AND

qualcomm sdm660Match-

Node

qualcomm sdx20_firmwareMatch-

AND

qualcomm sdx20Match-

Node

qualcomm sdx24_firmwareMatch-

AND

qualcomm sdx24Match-

[
  {
    "product": "Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking",
    "vendor": "Qualcomm, Inc.",
    "versions": [
      {
        "status": "affected",
        "version": "APQ8009, APQ8053, APQ8064, APQ8096AU, IPQ4019, IPQ8064, MDM9206, MDM9207C, MDM9607, MDM9615, MDM9640, MDM9650, MSM8909, MSM8909W, MSM8939, MSM8996AU, QCA4531, QCA6174A, QCA6574AU, QCA9377, QCA9379, QCA9558, QCA9880, QCA9886, QCA9980, SDA660, SDM630, SDM636, SDM660, SDX20, SDX24"
      }
    ]
  }
]

Source	Link
qualcomm	www.qualcomm.com/company/product-security/bulletins/december-2019-bulletin

21 Nov 2024 04:19Current

7.8High risk

Vulners AI Score7.8

CVSS 27.2

CVSS 3.17.8

EPSS0.00033