CVE-2019-10598 PUBLISHED CVSS 7.800000190734863 HIGH

Out of bound access can occur while processing peer info in IBSS connection mode due to lack of upper bounds check to ensure that for loop further will not cause an overflow in Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music in APQ8053, APQ8096AU, MDM9607, MSM8996AU, QCA6574AU, QCN7605, QCS605, SDA660, SDA845, SDM630, SDM636, SDM660, SDM845, SDX20, SDX24, SDX55, SM6150, SM7150, SM8150, SXR1130

EPSS 0.03% · 9.5th percentile

Risk Scores

CVSS v3.1
7.800000190734863
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS Score
0.03%
9.5th percentile

Affected Products

VendorProductVersions
qualcommsda845_firmware
qualcommapq8053_firmware
qualcommsdm630_firmware
qualcommsda660_firmware
qualcommsdx55_firmware
qualcommsdm636_firmware
qualcommsdx24_firmware
qualcommsm6150_firmware
qualcommqcn7605_firmware
qualcommsdm845_firmware
qualcommsxr1130_firmware
qualcommmdm9607_firmware
qualcommqca6574au_firmware
qualcommsm8150_firmware
qualcommmsm8996au_firmware
qualcommsdm660_firmware
qualcommsdx20_firmware
Qualcomm, Inc.Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & MusicAPQ8053, APQ8096AU, MDM9607, MSM8996AU, QCA6574AU, QCN7605, QCS605, SDA660, SDA845, SDM630, SDM636, SDM660, SDM845, SDX20, SDX24, SDX55, SM6150, SM7150, SM8150, SXR1130
qualcommsm7150_firmware
qualcommqcs605_firmware

…and 1 more

Timeline

References

Open in Interactive Console →