CVEvulnerability

CVE-2019-10589

9.8 CRITICAL Published 2020-04-16 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2020-04-16
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
9.8 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0 ([email protected])
10.0 HIGH — AV:N/AC:L/Au:N/C:C/I:C/A:C
Weaknesses
CWE-120

Description

Lack of length check of response buffer can lead to buffer over-flow while GP command response buffer handling in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking in APQ8017, APQ8053, APQ8098, MDM9206, MDM9607, MSM8917, MSM8920, MSM8937, MSM8940, MSM8953, MSM8998, QM215, SDA660, SDM429, SDM439, SDM450, SDM630, SDM632, SDM636, SDM660

Affected configurations

• qualcomm apq8017 firmware • qualcomm apq8053 firmware • qualcomm apq8098 firmware • qualcomm mdm9206 firmware • qualcomm mdm9607 firmware • qualcomm msm8917 firmware • qualcomm msm8920 firmware • qualcomm msm8937 firmware • qualcomm msm8940 firmware • qualcomm msm8953 firmware • qualcomm msm8998 firmware • qualcomm qm215 firmware • qualcomm sda660 firmware • qualcomm sdm429 firmware • qualcomm sdm439 firmware • qualcomm sdm450 firmware • qualcomm sdm630 firmware • qualcomm sdm632 firmware • qualcomm sdm636 firmware • qualcomm sdm660 firmware

Related

Weakness · CWE (1)

  • CWE-120 Buffer Copy without Checking Size of Input weakness

References