CVE-2019-10586

🗓️ 05 Mar 2020 08:56:06Reported by qualcommType

Filling media attribute tag names without validating buffer size can cause buffer overflow in various Snapdragon product

Reporter	Title	Published	Views	Family All 7
Circl	CVE-2019-10586	5 Mar 202013:13	–	circl
CNVD	Data Modem Buffer Overflow Vulnerability in Multiple Qualcomm Products	4 Mar 202000:00	–	cnvd
CVE	CVE-2019-10586	5 Mar 202008:56	–	cve
EUVD	EUVD-2019-2390	7 Oct 202500:30	–	euvd
NVD	CVE-2019-10586	5 Mar 202009:15	–	nvd
Prion	Buffer overflow	5 Mar 202009:15	–	prion
RedhatCVE	CVE-2019-10586	22 May 202510:24	–	redhatcve

[
  {
    "product": "Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables",
    "vendor": "Qualcomm, Inc.",
    "versions": [
      {
        "status": "affected",
        "version": "APQ8009, APQ8017, APQ8053, APQ8096AU, APQ8098, MDM9150, MDM9205, MDM9206, MDM9607, MDM9615, MDM9625, MDM9635M, MDM9640, MDM9645, MDM9650, MDM9655, MSM8905, MSM8909, MSM8909W, MSM8917, MSM8920, MSM8937, MSM8940, MSM8953, MSM8996AU, MSM8998, Nicobar, QCM2150, QCS605, QM215, Rennell, SC8180X, SDA660, SDA845, SDM429, SDM429W, SDM439, SDM450, SDM630, SDM632, SDM636, SDM660, SDM670, SDM710, SDM845, SDM850, SDX20, SDX24, SDX55, SM6150, SM7150, SM8150, SXR1130"
      }
    ]
  }
]

Source	Link
qualcomm	www.qualcomm.com/company/product-security/bulletins/march-2020-bulletin

05 Mar 2020 08:56Current

9.7High risk

Vulners AI Score9.7

EPSS0.00356