CVE-2019-10589
Lack of length check of response buffer can lead to buffer over-flow while GP command response buffer handling in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking in APQ8017, APQ8053, APQ8098, MDM9206, MDM9607, MSM8917, MSM8920, MSM8937, MSM8940, MSM8953, MSM8998, QM215, SDA660, SDM429, SDM439, SDM450, SDM630, SDM632, SDM636, SDM660
Published:Apr 16, 2020
Last Modified:Nov 21, 2024
EPS:Apr 16, 2020
EPSS Score:0.0033
CVSS Score:9.8
Affected Products
Vendor
Product
Action
Vendor
Qualcomm
Product
Apq8017
Qualcomm
Apq8017
Vendor
Qualcomm
Product
Apq8017 Firmware
Qualcomm
Apq8017 Firmware
Vendor
Qualcomm
Product
Apq8053
Qualcomm
Apq8053
Vendor
Qualcomm
Product
Apq8053 Firmware
Qualcomm
Apq8053 Firmware
Vendor
Qualcomm
Product
Apq8098
Qualcomm
Apq8098
Vendor
Qualcomm
Product
Apq8098 Firmware
Qualcomm
Apq8098 Firmware
Vendor
Qualcomm
Product
Mdm9206
Qualcomm
Mdm9206
Vendor
Qualcomm
Product
Mdm9206 Firmware
Qualcomm
Mdm9206 Firmware
Vendor
Qualcomm
Product
Mdm9607
Qualcomm
Mdm9607
Vendor
Qualcomm
Product
Mdm9607 Firmware
Qualcomm
Mdm9607 Firmware
Vendor
Qualcomm
Product
Msm8917
Qualcomm
Msm8917
Vendor
Qualcomm
Product
Msm8917 Firmware
Qualcomm
Msm8917 Firmware
Vendor
Qualcomm
Product
Msm8920
Qualcomm
Msm8920
Vendor
Qualcomm
Product
Msm8920 Firmware
Qualcomm
Msm8920 Firmware
Vendor
Qualcomm
Product
Msm8937
Qualcomm
Msm8937
Vendor
Qualcomm
Product
Msm8937 Firmware
Qualcomm
Msm8937 Firmware
Vendor
Qualcomm
Product
Msm8940
Qualcomm
Msm8940
Vendor
Qualcomm
Product
Msm8940 Firmware
Qualcomm
Msm8940 Firmware
Vendor
Qualcomm
Product
Msm8953
Qualcomm
Msm8953
Vendor
Qualcomm
Product
Msm8953 Firmware
Qualcomm
Msm8953 Firmware
Vendor
Qualcomm
Product
Msm8998
Qualcomm
Msm8998
Vendor
Qualcomm
Product
Msm8998 Firmware
Qualcomm
Msm8998 Firmware
Vendor
Qualcomm
Product
Qm215
Qualcomm
Qm215
Vendor
Qualcomm
Product
Qm215 Firmware
Qualcomm
Qm215 Firmware
Vendor
Qualcomm
Product
Sda660
Qualcomm
Sda660
Vendor
Qualcomm
Product
Sda660 Firmware
Qualcomm
Sda660 Firmware
Vendor
Qualcomm
Product
Sdm429
Qualcomm
Sdm429
Vendor
Qualcomm
Product
Sdm429 Firmware
Qualcomm
Sdm429 Firmware
Vendor
Qualcomm
Product
Sdm439
Qualcomm
Sdm439
Vendor
Qualcomm
Product
Sdm439 Firmware
Qualcomm
Sdm439 Firmware
Vendor
Qualcomm
Product
Sdm450
Qualcomm
Sdm450
Vendor
Qualcomm
Product
Sdm450 Firmware
Qualcomm
Sdm450 Firmware
Vendor
Qualcomm
Product
Sdm630
Qualcomm
Sdm630
Vendor
Qualcomm
Product
Sdm630 Firmware
Qualcomm
Sdm630 Firmware
Vendor
Qualcomm
Product
Sdm632
Qualcomm
Sdm632
Vendor
Qualcomm
Product
Sdm632 Firmware
Qualcomm
Sdm632 Firmware
Vendor
Qualcomm
Product
Sdm636
Qualcomm
Sdm636
Vendor
Qualcomm
Product
Sdm636 Firmware
Qualcomm
Sdm636 Firmware
Vendor
Qualcomm
Product
Sdm660
Qualcomm
Sdm660
Vendor
Qualcomm
Product
Sdm660 Firmware
Qualcomm
Sdm660 Firmware
Exploits
No exploit reference
Common Weakness Enumeration
Common Attack Pattern Enumeration and Classification (CAPEC)
Related CVEs
Common Vulnerability Scoring System
Attack Vector
Network
Adjacent
Local
Physical
Privileges Required
None
Low
High
User Interaction
None
Required
Scope
Unchanged
Changed
Confidentiality
None
Low
High
Integrity
None
Low
High
Availability
None
Low
High
