CVEvulnerability
CVE-2019-10499
7.8 HIGH
Official page ↗
- Status
- Modified
- Published
- 2019-09-30
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 7.8 HIGH — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 7.2 HIGH — AV:L/AC:L/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-129
Description
Improper validation of read and write index of tx and rx fifo`s before using for data copy from fifo can lead to out-of-bound access. in Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking in IPQ4019, IPQ8064, IPQ8074, QCS405, SD 665, SD 675, SD 730, SD 855
Affected configurations
• qualcomm ipq4019 firmware
• qualcomm ipq8064 firmware
• qualcomm ipq8074 firmware
• qualcomm qcs405 firmware
• qualcomm sd 665 firmware
• qualcomm sd 675 firmware
• qualcomm sd 730 firmware
• qualcomm sd 855 firmware
Related
Weakness · CWE (1)
- CWE-129 Improper Validation of Array Index weakness
References
- https://www.codeaurora.org/security-bulletin/2019/08/05/august-2019-code-aurora-security-bulletin Patch, Third Party Advisory
- https://www.codeaurora.org/security-bulletin/2019/08/05/august-2019-code-aurora-security-bulletin Patch, Third Party Advisory