8.5

CVE-2019-10510

BT process died and BT toggled due to null pointer dereference when invalid vendor pass through command sent from remote in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Mobile, Snapdragon Voice & Music in QCS405, QCS605, SD 636, SD 675, SD 730, SD 820A, SD 835, SD 845 / SD 850, SD 855, SDM630, SDM660

Data is provided by the National Vulnerability Database (NVD)
Qualcomm ≫ Qcs405 Firmware Version-
   Qualcomm ≫ Qcs405 Version-
Qualcomm ≫ Qcs605 Firmware Version-
   Qualcomm ≫ Qcs605 Version-
Qualcomm ≫ Sd 636 Firmware Version-
   Qualcomm ≫ Sd 636 Version-
Qualcomm ≫ Sd 675 Firmware Version-
   Qualcomm ≫ Sd 675 Version-
Qualcomm ≫ Sd 730 Firmware Version-
   Qualcomm ≫ Sd 730 Version-
Qualcomm ≫ Sd 820a Firmware Version-
   Qualcomm ≫ Sd 820a Version-
Qualcomm ≫ Sd 835 Firmware Version-
   Qualcomm ≫ Sd 835 Version-
Qualcomm ≫ Sd 845 Firmware Version-
   Qualcomm ≫ Sd 845 Version-
Qualcomm ≫ Sd 850 Firmware Version-
   Qualcomm ≫ Sd 850 Version-
Qualcomm ≫ Sd 855 Firmware Version-
   Qualcomm ≫ Sd 855 Version-
Qualcomm ≫ Sdm630 Firmware Version-
   Qualcomm ≫ Sdm630 Version-
Qualcomm ≫ Sdm660 Firmware Version-
   Qualcomm ≫ Sdm660 Version-
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 0.28% 0.484
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 8.2 3.9 4.2
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H
nvd@nist.gov 8.5 10 7.8
AV:N/AC:L/Au:N/C:N/I:P/A:C
CWE-476 NULL Pointer Dereference

The product dereferences a pointer that it expects to be valid but is NULL.