8.5

CVE-2019-10510

BT process died and BT toggled due to null pointer dereference when invalid vendor pass through command sent from remote in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Mobile, Snapdragon Voice & Music in QCS405, QCS605, SD 636, SD 675, SD 730, SD 820A, SD 835, SD 845 / SD 850, SD 855, SDM630, SDM660
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Qualcomm ≫ Qcs405 Firmware Version -
   Qualcomm ≫ Qcs405 Version -
Qualcomm ≫ Qcs605 Firmware Version -
   Qualcomm ≫ Qcs605 Version -
Qualcomm ≫ Sd 636 Firmware Version -
   Qualcomm ≫ Sd 636 Version -
Qualcomm ≫ Sd 675 Firmware Version -
   Qualcomm ≫ Sd 675 Version -
Qualcomm ≫ Sd 730 Firmware Version -
   Qualcomm ≫ Sd 730 Version -
Qualcomm ≫ Sd 820a Firmware Version -
   Qualcomm ≫ Sd 820a Version -
Qualcomm ≫ Sd 835 Firmware Version -
   Qualcomm ≫ Sd 835 Version -
Qualcomm ≫ Sd 845 Firmware Version -
   Qualcomm ≫ Sd 845 Version -
Qualcomm ≫ Sd 850 Firmware Version -
   Qualcomm ≫ Sd 850 Version -
Qualcomm ≫ Sd 855 Firmware Version -
   Qualcomm ≫ Sd 855 Version -
Qualcomm ≫ Sdm630 Firmware Version -
   Qualcomm ≫ Sdm630 Version -
Qualcomm ≫ Sdm660 Firmware Version -
   Qualcomm ≫ Sdm660 Version -
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.69% 0.479
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 8.2 3.9 4.2
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H
NIST 8.5 10 7.8
AV:N/AC:L/Au:N/C:N/I:P/A:C
CWE-476 NULL Pointer Dereference

The product dereferences a pointer that it expects to be valid but is NULL.

https://www.codeaurora.org/security-bulletin/2019/08/05/august-2019-code-aurora-security-bulletin
Patch
Third Party Advisory