CVE-2019-10481
Out of bound access occurs while handling the WMI FW event due to lack of check of buffer argument which comes directly from the WLAN FW in Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking in APQ8096AU, IPQ4019, IPQ8064, IPQ8074, MDM9607, MSM8996AU, QCA6574AU, QCA8081, QCN7605, SDX55, SM6150, SM7150, SM8150
- Score
- CVSS 3.1 7.8 High
- Status
- Modified - product-security@qualcomm.com
- Published
- 2019-12-18
- Last modified
- 2024-08-04
- Weaknesses
- CWE-129
Affected products
- Apq8096au Firmware (Qualcomm)
- Ipq4019 Firmware (Qualcomm)
- Ipq8064 Firmware (Qualcomm)
- Ipq8074 Firmware (Qualcomm)
- Mdm9607 Firmware (Qualcomm)
- Msm8996au Firmware (Qualcomm)
- Qca6574au Firmware (Qualcomm)
- Qca8081 Firmware (Qualcomm)
- Qcn7605 Firmware (Qualcomm)
- Sdx55 Firmware (Qualcomm)
- Sm6150 Firmware (Qualcomm)
- Sm7150 Firmware (Qualcomm)
- Sm8150 Firmware (Qualcomm)
- Snapdragon Auto (Qualcomm Inc.)
- Snapdragon Consumer Electronics Connectivity (Qualcomm Inc.)
- Snapdragon Consumer Iot (Qualcomm Inc.)
- Snapdragon Industrial Iot (Qualcomm Inc.)
- Snapdragon Mobile (Qualcomm Inc.)
- Snapdragon Voice Music (Qualcomm Inc.)
- Snapdragon Wired Infrastructure And Networking (Qualcomm Inc.)
References
- https://www.qualcomm.com/company/product-security/bulletins/december-2019-bulletin
