CVEvulnerability

CVE-2019-10616

5.5 MEDIUM Published 2020-03-05 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2020-03-05
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
5.5 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CVSS 2.0 ([email protected])
4.9 MEDIUM — AV:L/AC:L/Au:N/C:N/I:N/A:C
Weaknesses
CWE-476

Description

Possibility of null pointer access if the SPDM commands are executed in the non-standard way in TZ. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking in APQ8009, APQ8016, MDM9150, MDM9206, MDM9607, MDM9650, MSM8905, MSM8909, MSM8909W, MSM8998, SA6155P, SDX24

Affected configurations

• qualcomm apq8009 firmware • qualcomm apq8016 firmware • qualcomm mdm9150 firmware • qualcomm mdm9607 firmware • qualcomm mdm9650 firmware • qualcomm msm8905 firmware • qualcomm msm8909 firmware • qualcomm msm8909w firmware • qualcomm msm8998 firmware • qualcomm sa6155p firmware • qualcomm sdx24 firmware • qualcomm mdm9206 firmware

Related

Weakness · CWE (1)

  • CWE-476 NULL Pointer Dereference weakness

References