CVEvulnerability
CVE-2019-10620
7.8 HIGH
Official page ↗
- Status
- Modified
- Published
- 2020-04-16
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 7.8 HIGH — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 4.6 MEDIUM — AV:L/AC:L/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-120
Description
Kernel memory error in debug module due to improper check of user data length before copying into memory in Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile in APQ8096AU, APQ8098, MSM8996AU, QCN7605, SDM439, SDX24, SM8150
Affected configurations
• qualcomm apq8096au firmware
• qualcomm apq8098 firmware
• qualcomm msm8996au firmware
• qualcomm qcn7605 firmware
• qualcomm sdm439 firmware
• qualcomm sdx24 firmware
• qualcomm sm8150 firmware
Related
Weakness · CWE (1)
- CWE-120 Buffer Copy without Checking Size of Input weakness
References
- https://www.qualcomm.com/company/product-security/bulletins/april-2020-bulletin Patch, Vendor Advisory
- https://www.qualcomm.com/company/product-security/bulletins/april-2020-bulletin Patch, Vendor Advisory