7.8

CVE-2019-10549

Null pointer dereference issue can happen due to improper validation of CSEQ header response received from network in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables in MSM8905, MSM8909, MSM8917, MSM8920, MSM8937, MSM8940, MSM8953, Nicobar, QCM2150, QM215, Rennell, SC8180X, SDM429, SDM429W, SDM439, SDM450, SDM632, SDX24, SDX55, SM6150, SM7150, SM8150
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Qualcomm ≫ Msm8905 Firmware Version -
   Qualcomm ≫ Msm8905 Version -
Qualcomm ≫ Msm8909 Firmware Version -
   Qualcomm ≫ Msm8909 Version -
Qualcomm ≫ Msm8917 Firmware Version -
   Qualcomm ≫ Msm8917 Version -
Qualcomm ≫ Msm8920 Firmware Version -
   Qualcomm ≫ Msm8920 Version -
Qualcomm ≫ Msm8937 Firmware Version -
   Qualcomm ≫ Msm8937 Version -
Qualcomm ≫ Msm8940 Firmware Version -
   Qualcomm ≫ Msm8940 Version -
Qualcomm ≫ Msm8953 Firmware Version -
   Qualcomm ≫ Msm8953 Version -
Qualcomm ≫ Nicobar Firmware Version -
   Qualcomm ≫ Nicobar Version -
Qualcomm ≫ Qcm2150 Firmware Version -
   Qualcomm ≫ Qcm2150 Version -
Qualcomm ≫ Qm215 Firmware Version -
   Qualcomm ≫ Qm215 Version -
Qualcomm ≫ Rennell Firmware Version -
   Qualcomm ≫ Rennell Version -
Qualcomm ≫ Sc8180x Firmware Version -
   Qualcomm ≫ Sc8180x Version -
Qualcomm ≫ Sdm429 Firmware Version -
   Qualcomm ≫ Sdm429 Version -
Qualcomm ≫ Sdm429w Firmware Version -
   Qualcomm ≫ Sdm429w Version -
Qualcomm ≫ Sdm439 Firmware Version -
   Qualcomm ≫ Sdm439 Version -
Qualcomm ≫ Sdm450 Firmware Version -
   Qualcomm ≫ Sdm450 Version -
Qualcomm ≫ Sdm632 Firmware Version -
   Qualcomm ≫ Sdm632 Version -
Qualcomm ≫ Sdx24 Firmware Version -
   Qualcomm ≫ Sdx24 Version -
Qualcomm ≫ Sdx55 Firmware Version -
   Qualcomm ≫ Sdx55 Version -
Qualcomm ≫ Sm6150 Firmware Version -
   Qualcomm ≫ Sm6150 Version -
Qualcomm ≫ Sm7150 Firmware Version -
   Qualcomm ≫ Sm7150 Version -
Qualcomm ≫ Sm8150 Firmware Version -
   Qualcomm ≫ Sm8150 Version -
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.81% 0.53
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 7.5 3.9 3.6
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
NIST 7.8 10 6.9
AV:N/AC:L/Au:N/C:N/I:N/A:C
CWE-476 NULL Pointer Dereference

The product dereferences a pointer that it expects to be valid but is NULL.

https://www.qualcomm.com/company/product-security/bulletins/march-2020-bulletin
Vendor Advisory