CVEvulnerability

CVE-2019-10535

5.5 MEDIUM Published 2019-11-21 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2019-11-21
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
5.5 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CVSS 2.0 ([email protected])
2.1 LOW — AV:L/AC:L/Au:N/C:N/I:N/A:P
Weaknesses
CWE-119, CWE-20

Description

Improper validation for loop variable received from firmware can lead to out of bound access in WLAN function while iterating through loop in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music in APQ8053, APQ8096AU, APQ8098, MDM9640, MSM8996AU, MSM8998, QCA6574AU, QCN7605, QCS405, QCS605, SDA845, SDM845, SDX20

Affected configurations

• qualcomm apq8053 firmware • qualcomm apq8096au firmware • qualcomm apq8098 firmware • qualcomm mdm9640 firmware • qualcomm msm8996au firmware • qualcomm msm8998 firmware • qualcomm qca6574au firmware • qualcomm qcn7605 firmware • qualcomm qcs405 firmware • qualcomm qcs605 firmware • qualcomm sda845 firmware • qualcomm sdm845 firmware • qualcomm sdx20 firmware

Related

Weakness · CWE (2)

  • CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer weakness
  • CWE-20 Improper Input Validation weakness

References