CVEvulnerability

CVE-2019-10606

7.8 HIGH Published 2020-01-21 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2020-01-21
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
7.8 HIGH — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0 ([email protected])
7.2 HIGH — AV:L/AC:L/Au:N/C:C/I:C/A:C
Weaknesses
CWE-120

Description

Out-of-bound access will occur in USB driver due to lack of check to validate the frame size passed by user in Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables in MDM9607, MSM8909W, MSM8917, MSM8920, MSM8937, MSM8940, QCS605, SDX24

Affected configurations

• qualcomm mdm9607 firmware • qualcomm msm8909w firmware • qualcomm msm8917 firmware • qualcomm msm8920 firmware • qualcomm msm8937 firmware • qualcomm msm8940 firmware • qualcomm qcs605 firmware • qualcomm sdx24 firmware

Related

Weakness · CWE (1)

  • CWE-120 Buffer Copy without Checking Size of Input weakness

References