CVEvulnerability

CVE-2019-10605

7.8 HIGH Published 2019-12-18 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2019-12-18
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
7.8 HIGH — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0 ([email protected])
7.2 HIGH — AV:L/AC:L/Au:N/C:C/I:C/A:C
Weaknesses
CWE-120

Description

Buffer overwrite can occur in IEEE80211 header filling function due to lack of range check of array index received from firmware in Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking in APQ8009, APQ8053, IPQ8074, MDM9607, MDM9650, MSM8909, MSM8939, QCN7605, SDA660, SDM630, SDM636, SDM660, SDX20, SDX24

Affected configurations

• qualcomm apq8009 firmware • qualcomm apq8053 firmware • qualcomm ipq8074 firmware • qualcomm mdm9607 firmware • qualcomm mdm9650 firmware • qualcomm msm8909 firmware • qualcomm msm8939 firmware • qualcomm qcn7605 firmware • qualcomm sda660 firmware • qualcomm sdm630 firmware • qualcomm sdm636 firmware • qualcomm sdm660 firmware • qualcomm sdx20 firmware • qualcomm sdx24 firmware

Related

Weakness · CWE (1)

  • CWE-120 Buffer Copy without Checking Size of Input weakness

References