7.8

CVE-2019-10512

Payload size is not checked before using it as array index in audio in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking in IPQ4019, IPQ8064, IPQ8074, MDM9150, MDM9206, MDM9607, MDM9640, MDM9650, MSM8909W, MSM8996AU, QCS405, QCS605, Qualcomm 215, SD 210/SD 212/SD 205, SD 425, SD 427, SD 430, SD 435, SD 439 / SD 429, SD 450, SD 615/16/SD 415, SD 625, SD 632, SD 636, SD 665, SD 675, SD 712 / SD 710 / SD 670, SD 730, SD 820, SD 820A, SD 835, SD 845 / SD 850, SD 855, SDA660, SDM439, SDM630, SDM660, SDX20, SDX24, SXR1130
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Qualcomm ≫ Ipq4019 Firmware Version -
   Qualcomm ≫ Ipq4019 Version -
Qualcomm ≫ Ipq8064 Firmware Version -
   Qualcomm ≫ Ipq8064 Version -
Qualcomm ≫ Ipq8074 Firmware Version -
   Qualcomm ≫ Ipq8074 Version -
Qualcomm ≫ Mdm9150 Firmware Version -
   Qualcomm ≫ Mdm9150 Version -
Qualcomm ≫ Mdm9206 Firmware Version -
   Qualcomm ≫ Mdm9206 Version -
Qualcomm ≫ Mdm9607 Firmware Version -
   Qualcomm ≫ Mdm9607 Version -
Qualcomm ≫ Mdm9640 Firmware Version -
   Qualcomm ≫ Mdm9640 Version -
Qualcomm ≫ Mdm9650 Firmware Version -
   Qualcomm ≫ Mdm9650 Version -
Qualcomm ≫ Msm8909w Firmware Version -
   Qualcomm ≫ Msm8909w Version -
Qualcomm ≫ Msm8996au Firmware Version -
   Qualcomm ≫ Msm8996au Version -
Qualcomm ≫ Qcs405 Firmware Version -
   Qualcomm ≫ Qcs405 Version -
Qualcomm ≫ Qcs605 Firmware Version -
   Qualcomm ≫ Qcs605 Version -
Qualcomm ≫ Qualcomm 215 Firmware Version -
   Qualcomm ≫ Qualcomm 215 Version -
Qualcomm ≫ Sd 210 Firmware Version -
   Qualcomm ≫ Sd 210 Version -
Qualcomm ≫ Sd 212 Firmware Version -
   Qualcomm ≫ Sd 212 Version -
Qualcomm ≫ Sd 205 Firmware Version -
   Qualcomm ≫ Sd 205 Version -
Qualcomm ≫ Sd 425 Firmware Version -
   Qualcomm ≫ Sd 425 Version -
Qualcomm ≫ Sd 427 Firmware Version -
   Qualcomm ≫ Sd 427 Version -
Qualcomm ≫ Sd 430 Firmware Version -
   Qualcomm ≫ Sd 430 Version -
Qualcomm ≫ Sd 435 Firmware Version -
   Qualcomm ≫ Sd 435 Version -
Qualcomm ≫ Sd 439 Firmware Version -
   Qualcomm ≫ Sd 439 Version -
Qualcomm ≫ Sd 429 Firmware Version -
   Qualcomm ≫ Sd 429 Version -
Qualcomm ≫ Sd 450 Firmware Version -
   Qualcomm ≫ Sd 450 Version -
Qualcomm ≫ Sd 615 Firmware Version -
   Qualcomm ≫ Sd 615 Version -
Qualcomm ≫ Sd 616 Firmware Version -
   Qualcomm ≫ Sd 616 Version -
Qualcomm ≫ Sd 415 Firmware Version -
   Qualcomm ≫ Sd 415 Version -
Qualcomm ≫ Sd 625 Firmware Version -
   Qualcomm ≫ Sd 625 Version -
Qualcomm ≫ Sd 632 Firmware Version -
   Qualcomm ≫ Sd 632 Version -
Qualcomm ≫ Sd 636 Firmware Version -
   Qualcomm ≫ Sd 636 Version -
Qualcomm ≫ Sd 665 Firmware Version -
   Qualcomm ≫ Sd 665 Version -
Qualcomm ≫ Sd 675 Firmware Version -
   Qualcomm ≫ Sd 675 Version -
Qualcomm ≫ Sd 712 Firmware Version -
   Qualcomm ≫ Sd 712 Version -
Qualcomm ≫ Sd 710 Firmware Version -
   Qualcomm ≫ Sd 710 Version -
Qualcomm ≫ Sd 670 Firmware Version -
   Qualcomm ≫ Sd 670 Version -
Qualcomm ≫ Sd 730 Firmware Version -
   Qualcomm ≫ Sd 730 Version -
Qualcomm ≫ Sd 820 Firmware Version -
   Qualcomm ≫ Sd 820 Version -
Qualcomm ≫ Sd 820a Firmware Version -
   Qualcomm ≫ Sd 820a Version -
Qualcomm ≫ Sd 835 Firmware Version -
   Qualcomm ≫ Sd 835 Version -
Qualcomm ≫ Sd 845 Firmware Version -
   Qualcomm ≫ Sd 845 Version -
Qualcomm ≫ Sd 850 Firmware Version -
   Qualcomm ≫ Sd 850 Version -
Qualcomm ≫ Sd 855 Firmware Version -
   Qualcomm ≫ Sd 855 Version -
Qualcomm ≫ Sda660 Firmware Version -
   Qualcomm ≫ Sda660 Version -
Qualcomm ≫ Sdm439 Firmware Version -
   Qualcomm ≫ Sdm439 Version -
Qualcomm ≫ Sdm630 Firmware Version -
   Qualcomm ≫ Sdm630 Version -
Qualcomm ≫ Sdm660 Firmware Version -
   Qualcomm ≫ Sdm660 Version -
Qualcomm ≫ Sdx20 Firmware Version -
   Qualcomm ≫ Sdx20 Version -
Qualcomm ≫ Sdx24 Firmware Version -
   Qualcomm ≫ Sdx24 Version -
Qualcomm ≫ Sxr1130 Firmware Version -
   Qualcomm ≫ Sxr1130 Version -
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.19% 0.089
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 7.8 1.8 5.9
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
NIST 4.6 3.9 6.4
AV:L/AC:L/Au:N/C:P/I:P/A:P
CWE-129 Improper Validation of Array Index

The product uses untrusted input when calculating or using an array index, but the product does not validate or incorrectly validates the index to ensure the index references a valid position within the array.

https://source.android.com/security/bulletin/
Patch
Third Party Advisory