CVE-2019-10499

Improper validation of read and write index of tx and rx fifo`s before using for data copy from fifo can lead to out-of-bound access. in Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking in IPQ4019, IPQ8064, IPQ8074, QCS405, SD 665, SD 675, SD 730, SD 855

Score

CVSS 3.1 7.8 High

Status

Modified - product-security@qualcomm.com

Published

2019-09-30

Last modified

2024-08-04

Weaknesses

CWE-129

Affected products

• Ipq4019 Firmware (Qualcomm)
• Ipq8064 Firmware (Qualcomm)
• Ipq8074 Firmware (Qualcomm)
• Qcs405 Firmware (Qualcomm)
• Sd 665 Firmware (Qualcomm)
• Sd 675 Firmware (Qualcomm)
• Sd 730 Firmware (Qualcomm)
• Sd 855 Firmware (Qualcomm)
• Snapdragon Mobile (Qualcomm Inc.)
• Snapdragon Voice Music (Qualcomm Inc.)
• Snapdragon Wired Infrastructure And Networking (Qualcomm Inc.)

References

• https://www.codeaurora.org/security-bulletin/2019/08/05/august-2019-code-aurora-security-bulletin