CVEvulnerability
CVE-2019-10569
7.8 HIGH
Official page ↗
- Status
- Modified
- Published
- 2020-03-05
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 7.8 HIGH — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 7.2 HIGH — AV:L/AC:L/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-787
Description
Stack buffer overflow due to instance id is misplaced inside definition of hardware accelerated effects in makefile in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Mobile in APQ8053, APQ8098, MDM9607, MDM9640, MSM8998, QCS605, SC8180X, SDM439, SDM630, SDM636, SDM660, SDM845, SDX24, SDX55, SM6150, SM7150, SM8150, SXR1130
Affected configurations
• qualcomm apq8053 firmware
• qualcomm apq8098 firmware
• qualcomm mdm9607 firmware
• qualcomm mdm9640 firmware
• qualcomm msm8998 firmware
• qualcomm qcs605 firmware
• qualcomm sc8180x firmware
• qualcomm sdm439 firmware
• qualcomm sdm630 firmware
• qualcomm sdm636 firmware
• qualcomm sdm660 firmware
• qualcomm sdm845 firmware
• qualcomm sdx24 firmware
• qualcomm sdx55 firmware
• qualcomm sm6150 firmware
• qualcomm sm7150 firmware
• qualcomm sm8150 firmware
• qualcomm sxr1130 firmware
Related
Weakness · CWE (1)
- CWE-787 Out-of-bounds Write weakness
References
- https://www.qualcomm.com/company/product-security/bulletins/march-2020-bulletin Patch, Vendor Advisory
- https://www.qualcomm.com/company/product-security/bulletins/march-2020-bulletin Patch, Vendor Advisory