CVE-2019-10610 — Vulnetix

CVE-2019-10610 PUBLISHED CVSS 9.100000381469727 CRITICAL

Possible buffer over read when trying to process SDP message Video media line with frame-size attribute in video Media line in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in APQ8009, APQ8017, APQ8053, APQ8076, APQ8096, APQ8096AU, APQ8098, MDM9150, MDM9206, MDM9607, MDM9615, MDM9625, MDM9635M, MDM9640, MDM9645, MDM9650, MDM9655, MSM8905, MSM8909, MSM8909W, MSM8917, MSM8920, MSM8937, MSM8940, MSM8953, MSM8996AU, MSM8998, Nicobar, QCM2150, QCS605, QM215, Rennell, SC7180, SC8180X, SDA660, SDA845, SDM429, SDM429W, SDM439, SDM450, SDM630, SDM632, SDM636, SDM660, SDM670, SDM710, SDM845, SDM850, SDX20, SDX24, SDX55, SM6150, SM7150, SM8150, SXR1130

EPSS 0.24% · 47.2th percentile

Risk Scores

CVSS v3.1

9.100000381469727

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H

EPSS Score

0.24%

47.2th percentile

Affected Products

Vendor	Product	Versions
qualcomm	sda845_firmware
qualcomm	apq8053_firmware
qualcomm	sdm710_firmware
qualcomm	apq8017_firmware
qualcomm	mdm9635m_firmware
qualcomm	nicobar_firmware
qualcomm	apq8076_firmware
qualcomm	apq8098_firmware
qualcomm	msm8996au_firmware
qualcomm	mdm9150_firmware
qualcomm	sdm439_firmware
qualcomm	msm8905_firmware
qualcomm	sm8150_firmware
qualcomm	mdm9640_firmware
qualcomm	apq8096_firmware
qualcomm	sm6150_firmware
qualcomm	rennell_firmware
qualcomm	msm8940_firmware
qualcomm	mdm9645_firmware
qualcomm	sdm632_firmware

…and 36 more

Timeline

Apr 7, 2020 CVE Published
Apr 14, 2021 EPSS Score
Jun 23, 2021 EPSS Score
Aug 24, 2021 EPSS Score
Oct 26, 2021 EPSS Score
Jan 6, 2022 EPSS Score
Feb 4, 2022 EPSS Score
Feb 28, 2022 EPSS Score
Apr 1, 2022 EPSS Score
May 1, 2022 EPSS Score
Jul 3, 2022 EPSS Score
Sep 4, 2022 EPSS Score

References

Open in Interactive Console →