CVE-2019-10540

EPSS 1.14%
Veröffentlicht 30.09.2019 16:15:11
Zuletzt bearbeitet 21.11.2024 04:19:24
Erkennungen
Login

Buffer overflow in WLAN NAN function due to lack of check of count value received in NAN availability attribute in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking in IPQ8074, MSM8996AU, QCA6174A, QCA6574AU, QCA8081, QCA9377, QCA9379, QCS404, QCS405, QCS605, SD 636, SD 665, SD 675, SD 712 / SD 710 / SD 670, SD 730, SD 820, SD 835, SD 845 / SD 850, SD 855, SD 8CX, SDA660, SDM630, SDM660, SXR1130

Betroffene Produkte Warnungen 0 Metriken 3 CWE 1 Referenzen 4

NVD 27 VulnDex Vulnerability Enrichment 0

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Qualcomm ≫ Ipq8074 Firmware Version -

Qualcomm ≫ Ipq8074 Version -

Qualcomm ≫ Msm8996au Firmware Version -

Qualcomm ≫ Msm8996au Version -

Qualcomm ≫ Qca6174a Firmware Version -

Qualcomm ≫ Qca6174a Version -

Qualcomm ≫ Qca6574au Firmware Version -

Qualcomm ≫ Qca6574au Version -

Qualcomm ≫ Qca8081 Firmware Version -

Qualcomm ≫ Qca8081 Version -

Qualcomm ≫ Qca9377 Firmware Version -

Qualcomm ≫ Qca9377 Version -

Qualcomm ≫ Qca9379 Firmware Version -

Qualcomm ≫ Qca9379 Version -

Qualcomm ≫ Qcs404 Firmware Version -

Qualcomm ≫ Qcs404 Version -

Qualcomm ≫ Qcs405 Firmware Version -

Qualcomm ≫ Qcs405 Version -

Qualcomm ≫ Qcs605 Firmware Version -

Qualcomm ≫ Qcs605 Version -

Qualcomm ≫ Sd 636 Firmware Version -

Qualcomm ≫ Sd 636 Version -

Qualcomm ≫ Sd 665 Firmware Version -

Qualcomm ≫ Sd 665 Version -

Qualcomm ≫ Sd 675 Firmware Version -

Qualcomm ≫ Sd 675 Version -

Qualcomm ≫ Sd 712 Firmware Version -

Qualcomm ≫ Sd 712 Version -

Qualcomm ≫ Sd 710 Firmware Version -

Qualcomm ≫ Sd 710 Version -

Qualcomm ≫ Sd 670 Firmware Version -

Qualcomm ≫ Sd 670 Version -

Qualcomm ≫ Sd 730 Firmware Version -

Qualcomm ≫ Sd 730 Version -

Qualcomm ≫ Sd 820 Firmware Version -

Qualcomm ≫ Sd 820 Version -

Qualcomm ≫ Sd 835 Firmware Version -

Qualcomm ≫ Sd 835 Version -

Qualcomm ≫ Sd 845 Firmware Version -

Qualcomm ≫ Sd 845 Version -

Qualcomm ≫ Sd 850 Firmware Version -

Qualcomm ≫ Sd 850 Version -

Qualcomm ≫ Sd 855 Firmware Version -

Qualcomm ≫ Sd 855 Version -

Qualcomm ≫ Sd 8cx Firmware Version -

Qualcomm ≫ Sd 8cx Version -

Qualcomm ≫ Sda660 Firmware Version -

Qualcomm ≫ Sda660 Version -

Qualcomm ≫ Sdm630 Firmware Version -

Qualcomm ≫ Sdm630 Version -

Qualcomm ≫ Sdm660 Firmware Version -

Qualcomm ≫ Sdm660 Version -

Qualcomm ≫ Sxr1130 Firmware Version -

Qualcomm ≫ Sxr1130 Version -

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	1.14%	0.623

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
NIST	9.8	3.9	5.9	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
NIST	10	10	10	AV:N/AC:L/Au:N/C:C/I:C/A:C

CWE-120 Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

The product copies an input buffer to an output buffer without verifying that the size of the input buffer is less than the size of the output buffer.

https://www.qualcomm.com/company/product-security/bulletins

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2019-10540

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2019-10540

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2019-10540

EUVD

Team-orientierte Vulnerability Management Plattform

Features der Plattform

CVE-2019-10540