CVE-2019-10537
Improper validation of event buffer extracted from FW response can lead to integer overflow, which will allow to pass the length check and eventually will lead to buffer overwrite when event data is copied to context buffer in Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music in MDM9607, Nicobar, QCA6574AU, QCN7605, QCS405, QCS605, SDM660, SDM845, SDX55, SM6150, SM7150, SM8150, SM8250, SXR1130, SXR2130
Published:Dec 18, 2019
Last Modified:Nov 21, 2024
EPS:Dec 18, 2019
EPSS Score:0.00033
CVSS Score:7.8
Affected Products
Vendor
Product
Action
Vendor
Qualcomm
Product
Mdm9607
Qualcomm
Mdm9607
Vendor
Qualcomm
Product
Mdm9607 Firmware
Qualcomm
Mdm9607 Firmware
Vendor
Qualcomm
Product
Nicobar
Qualcomm
Nicobar
Vendor
Qualcomm
Product
Nicobar Firmware
Qualcomm
Nicobar Firmware
Vendor
Qualcomm
Product
Qca6574au
Qualcomm
Qca6574au
Vendor
Qualcomm
Product
Qca6574au Firmware
Qualcomm
Qca6574au Firmware
Vendor
Qualcomm
Product
Qcn7605
Qualcomm
Qcn7605
Vendor
Qualcomm
Product
Qcn7605 Firmware
Qualcomm
Qcn7605 Firmware
Vendor
Qualcomm
Product
Qcs405
Qualcomm
Qcs405
Vendor
Qualcomm
Product
Qcs405 Firmware
Qualcomm
Qcs405 Firmware
Vendor
Qualcomm
Product
Qcs605
Qualcomm
Qcs605
Vendor
Qualcomm
Product
Qcs605 Firmware
Qualcomm
Qcs605 Firmware
Vendor
Qualcomm
Product
Sdm660
Qualcomm
Sdm660
Vendor
Qualcomm
Product
Sdm660 Firmware
Qualcomm
Sdm660 Firmware
Vendor
Qualcomm
Product
Sdm845
Qualcomm
Sdm845
Vendor
Qualcomm
Product
Sdm845 Firmware
Qualcomm
Sdm845 Firmware
Vendor
Qualcomm
Product
Sdx55
Qualcomm
Sdx55
Vendor
Qualcomm
Product
Sdx55 Firmware
Qualcomm
Sdx55 Firmware
Vendor
Qualcomm
Product
Sm6150
Qualcomm
Sm6150
Vendor
Qualcomm
Product
Sm6150 Firmware
Qualcomm
Sm6150 Firmware
Vendor
Qualcomm
Product
Sm7150
Qualcomm
Sm7150
Vendor
Qualcomm
Product
Sm7150 Firmware
Qualcomm
Sm7150 Firmware
Vendor
Qualcomm
Product
Sm8150
Qualcomm
Sm8150
Vendor
Qualcomm
Product
Sm8150 Firmware
Qualcomm
Sm8150 Firmware
Vendor
Qualcomm
Product
Sm8250
Qualcomm
Sm8250
Vendor
Qualcomm
Product
Sm8250 Firmware
Qualcomm
Sm8250 Firmware
Vendor
Qualcomm
Product
Sxr1130
Qualcomm
Sxr1130
Vendor
Qualcomm
Product
Sxr1130 Firmware
Qualcomm
Sxr1130 Firmware
Vendor
Qualcomm
Product
Sxr2130
Qualcomm
Sxr2130
Vendor
Qualcomm
Product
Sxr2130 Firmware
Qualcomm
Sxr2130 Firmware
Exploits
No exploit reference
Common Weakness Enumeration
Common Attack Pattern Enumeration and Classification (CAPEC)
Related CVEs
Common Vulnerability Scoring System
Attack Vector
Network
Adjacent
Local
Physical
Privileges Required
None
Low
High
User Interaction
None
Required
Scope
Unchanged
Changed
Confidentiality
None
Low
High
Integrity
None
Low
High
Availability
None
Low
High
