CVE-2019-10537

Improper validation of event buffer extracted from FW response can lead to integer overflow, which will allow to pass the length check and eventually will lead to buffer overwrite when event data is copied to context buffer in Snapdragon Auto, Snapdragon Consumer Electronics Connectivity,...

CVE-2019-10537

CVE-2019-10537 is an integer-overflow vulnerability caused by improper validation of an event buffer extracted from firmware responses, leading to a potential buffer overwrite when event data is copied to the context buffer. Affected are Qualcomm Snapdragon family devices including Snapdragon Aut...