7.8

CVE-2019-10508

Lack of input validation for data received from user space can lead to OOB access in WLAN in Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in MDM9150, MDM9206, MDM9607, MDM9640, MDM9650, MSM8909W, MSM8996AU, QCA6174A, QCA6574AU, QCA9377, QCA9379, SD 210/SD 212/SD 205, SD 425, SD 430, SD 600, SD 615/16/SD 415, SD 625, SD 632, SD 650/52, SD 820A, SDX20

Data is provided by the National Vulnerability Database (NVD)
Qualcomm ≫ Mdm9150 Firmware Version-
   Qualcomm ≫ Mdm9150 Version-
Qualcomm ≫ Mdm9206 Firmware Version-
   Qualcomm ≫ Mdm9206 Version-
Qualcomm ≫ Mdm9607 Firmware Version-
   Qualcomm ≫ Mdm9607 Version-
Qualcomm ≫ Mdm9640 Firmware Version-
   Qualcomm ≫ Mdm9640 Version-
Qualcomm ≫ Mdm9650 Firmware Version-
   Qualcomm ≫ Mdm9650 Version-
Qualcomm ≫ Msm8909w Firmware Version-
   Qualcomm ≫ Msm8909w Version-
Qualcomm ≫ Msm8996au Firmware Version-
   Qualcomm ≫ Msm8996au Version-
Qualcomm ≫ Qca6174a Firmware Version-
   Qualcomm ≫ Qca6174a Version-
Qualcomm ≫ Qca6574au Firmware Version-
   Qualcomm ≫ Qca6574au Version-
Qualcomm ≫ Qca9377 Firmware Version-
   Qualcomm ≫ Qca9377 Version-
Qualcomm ≫ Qca9379 Firmware Version-
   Qualcomm ≫ Qca9379 Version-
Qualcomm ≫ Sd 210 Firmware Version-
   Qualcomm ≫ Sd 210 Version-
Qualcomm ≫ Sd 212 Firmware Version-
   Qualcomm ≫ Sd 212 Version-
Qualcomm ≫ Sd 205 Firmware Version-
   Qualcomm ≫ Sd 205 Version-
Qualcomm ≫ Sd 425 Firmware Version-
   Qualcomm ≫ Sd 425 Version-
Qualcomm ≫ Sd 430 Firmware Version-
   Qualcomm ≫ Sd 430 Version-
Qualcomm ≫ Sd 600 Firmware Version-
   Qualcomm ≫ Sd 600 Version-
Qualcomm ≫ Sd 615 Firmware Version-
   Qualcomm ≫ Sd 615 Version-
Qualcomm ≫ Sd 616 Firmware Version-
   Qualcomm ≫ Sd 616 Version-
Qualcomm ≫ Sd 415 Firmware Version-
   Qualcomm ≫ Sd 415 Version-
Qualcomm ≫ Sd 625 Firmware Version-
   Qualcomm ≫ Sd 625 Version-
Qualcomm ≫ Sd 632 Firmware Version-
   Qualcomm ≫ Sd 632 Version-
Qualcomm ≫ Sd 650 Firmware Version-
   Qualcomm ≫ Sd 650 Version-
Qualcomm ≫ Sd 652 Firmware Version-
   Qualcomm ≫ Sd 652 Version-
Qualcomm ≫ Sd 820a Firmware Version-
   Qualcomm ≫ Sd 820a Version-
Qualcomm ≫ Sdx20 Firmware Version-
   Qualcomm ≫ Sdx20 Version-
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 0.04% 0.096
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 7.8 1.8 5.9
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
nvd@nist.gov 4.6 3.9 6.4
AV:L/AC:L/Au:N/C:P/I:P/A:P
CWE-120 Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

The product copies an input buffer to an output buffer without verifying that the size of the input buffer is less than the size of the output buffer, leading to a buffer overflow.