CVEvulnerability
CVE-2019-10531
9.8 CRITICAL
Official page ↗
- Status
- Modified
- Published
- 2019-11-06
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 9.8 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 10.0 HIGH — AV:N/AC:L/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-120
Description
Incorrect reading of system image resulting in buffer overflow when size of system image is increased in Snapdragon Auto, Snapdragon Mobile, Snapdragon Wearables in MDM9607, MSM8909W, Qualcomm 215, SD 210/SD 212/SD 205, SD 425, SD 439 / SD 429, SD 450, SD 625, SD 632, SDM439
Affected configurations
• qualcomm mdm9607 firmware
• qualcomm msm8909w firmware
• qualcomm qualcomm 215 firmware
• qualcomm sd 210 firmware
• qualcomm sd 212 firmware
• qualcomm sd 205 firmware
• qualcomm sd 425 firmware
• qualcomm sd 439 firmware
• qualcomm sd 429 firmware
• qualcomm sd 450 firmware
• qualcomm sd 625 firmware
• qualcomm sd 632 firmware
• qualcomm sdm439 firmware
Related
Weakness · CWE (1)
- CWE-120 Buffer Copy without Checking Size of Input weakness
References
- https://source.android.com/security/bulletin/ Patch, Vendor Advisory
- https://source.android.com/security/bulletin/ Patch, Vendor Advisory