CVEvulnerability

CVE-2019-10510

8.2 HIGH Published 2019-09-30 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2019-09-30
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
8.2 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H
CVSS 2.0 ([email protected])
8.5 HIGH — AV:N/AC:L/Au:N/C:N/I:P/A:C
Weaknesses
CWE-476

Description

BT process died and BT toggled due to null pointer dereference when invalid vendor pass through command sent from remote in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Mobile, Snapdragon Voice & Music in QCS405, QCS605, SD 636, SD 675, SD 730, SD 820A, SD 835, SD 845 / SD 850, SD 855, SDM630, SDM660

Affected configurations

• qualcomm qcs405 firmware • qualcomm qcs605 firmware • qualcomm sd 636 firmware • qualcomm sd 675 firmware • qualcomm sd 730 firmware • qualcomm sd 820a firmware • qualcomm sd 835 firmware • qualcomm sd 845 firmware • qualcomm sd 850 firmware • qualcomm sd 855 firmware • qualcomm sdm630 firmware • qualcomm sdm660 firmware

Related

Weakness · CWE (1)

  • CWE-476 NULL Pointer Dereference weakness

References