CVE-2019-10607 — Vulnetix

CVE-2019-10607 PUBLISHED CVSS 7.800000190734863 HIGH

Out of bounds memcpy can occur by providing the embedded NULL character string and length greater than the actual string length in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking in APQ8009, APQ8017, APQ8053, APQ8064, APQ8096AU, APQ8098, IPQ4019, IPQ8064, IPQ8074, MDM9206, MDM9207C, MDM9607, MDM9615, MDM9640, MDM9650, MSM8905, MSM8909, MSM8909W, MSM8917, MSM8920, MSM8937, MSM8939, MSM8940, MSM8996, MSM8996AU, QCA4531, QCA8081, QCA9531, QCA9558, QCA9886, QCA9980, QCN7605, QCS605, SDA660, SDX20, SDX24, SDX55, SM8150, SXR1130

EPSS 0.03% · 10.1th percentile

Risk Scores

CVSS 3.1

7.800000190734863

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS Score

0.03%

10.1th percentile

Affected Products

Vendor	Product	Versions
qualcomm	qca9886_firmware
qualcomm	mdm9607_firmware
qualcomm	qca8081_firmware
qualcomm	mdm9615_firmware
qualcomm	msm8909w_firmware
qualcomm	qca9558_firmware
qualcomm	qcs605_firmware
qualcomm	apq8098_firmware
qualcomm	mdm9650_firmware
qualcomm	mdm9206_firmware
qualcomm	mdm9640_firmware
qualcomm	sdx24_firmware
qualcomm	msm8920_firmware
qualcomm	qcn7605_firmware
qualcomm	qca4531_firmware
qualcomm	apq8009_firmware
qualcomm	msm8917_firmware
qualcomm	apq8096au_firmware
qualcomm	sxr1130_firmware
qualcomm	sdx55_firmware

…and 20 more

Exploit Intelligence

https://www.qualcomm.com/company/product-security/bulletins/december-2019-bulletin (circl)

Timeline

Dec 2, 2019 CVE Published
Apr 14, 2021 EPSS Score
Jun 23, 2021 EPSS Score
Aug 24, 2021 EPSS Score
Oct 26, 2021 EPSS Score
Dec 27, 2021 EPSS Score
Feb 28, 2022 EPSS Score
Apr 1, 2022 EPSS Score
May 1, 2022 EPSS Score
Jul 3, 2022 EPSS Score
Sep 4, 2022 EPSS Score
Nov 6, 2022 EPSS Score

References

Open in Interactive Console →