7.8

CVE-2019-10564

EPSS 0.19%
Veröffentlicht 18.12.2019 06:15:12
Zuletzt bearbeitet 21.11.2024 04:19:27
Erkennungen
Login

Possible OOB issue in EEPROM due to lack of check while accessing memory map array at the time of reading operation in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in APQ8009, APQ8053, MSM8909W, MSM8917, MSM8953, Nicobar, QCS405, QCS605, QM215, SA6155P, SDA845, SDM429, SDM439, SDM450, SDM632, SDM670, SDM710, SDM845, SDX24, SDX55, SM6150, SM7150, SM8150, SM8250, SXR1130, SXR2130

Betroffene Produkte Warnungen 0 Metriken 3 CWE 1 Referenzen 4

NVD 26 VulnDex Vulnerability Enrichment 0

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Qualcomm ≫ Apq8009 Firmware Version -

Qualcomm ≫ Apq8009 Version -

Qualcomm ≫ Apq8053 Firmware Version -

Qualcomm ≫ Apq8053 Version -

Qualcomm ≫ Msm8909w Firmware Version -

Qualcomm ≫ Msm8909w Version -

Qualcomm ≫ Msm8917 Firmware Version -

Qualcomm ≫ Msm8917 Version -

Qualcomm ≫ Msm8953 Firmware Version -

Qualcomm ≫ Msm8953 Version -

Qualcomm ≫ Nicobar Firmware Version -

Qualcomm ≫ Nicobar Version -

Qualcomm ≫ Qcs405 Firmware Version -

Qualcomm ≫ Qcs405 Version -

Qualcomm ≫ Qcs605 Firmware Version -

Qualcomm ≫ Qcs605 Version -

Qualcomm ≫ Qm215 Firmware Version -

Qualcomm ≫ Qm215 Version -

Qualcomm ≫ Sa6155p Firmware Version -

Qualcomm ≫ Sa6155p Version -

Qualcomm ≫ Sda845 Firmware Version -

Qualcomm ≫ Sda845 Version -

Qualcomm ≫ Sdm429 Firmware Version -

Qualcomm ≫ Sdm429 Version -

Qualcomm ≫ Sdm439 Firmware Version -

Qualcomm ≫ Sdm439 Version -

Qualcomm ≫ Sdm450 Firmware Version -

Qualcomm ≫ Sdm450 Version -

Qualcomm ≫ Sdm632 Firmware Version -

Qualcomm ≫ Sdm632 Version -

Qualcomm ≫ Sdm670 Firmware Version -

Qualcomm ≫ Sdm670 Version -

Qualcomm ≫ Sdm710 Firmware Version -

Qualcomm ≫ Sdm710 Version -

Qualcomm ≫ Sdm845 Firmware Version -

Qualcomm ≫ Sdm845 Version -

Qualcomm ≫ Sdx24 Firmware Version -

Qualcomm ≫ Sdx24 Version -

Qualcomm ≫ Sdx55 Firmware Version -

Qualcomm ≫ Sdx55 Version -

Qualcomm ≫ Sm6150 Firmware Version -

Qualcomm ≫ Sm6150 Version -

Qualcomm ≫ Sm7150 Firmware Version -

Qualcomm ≫ Sm7150 Version -

Qualcomm ≫ Sm8150 Firmware Version -

Qualcomm ≫ Sm8150 Version -

Qualcomm ≫ Sm8250 Firmware Version -

Qualcomm ≫ Sm8250 Version -

Qualcomm ≫ Sxr1130 Firmware Version -

Qualcomm ≫ Sxr1130 Version -

Qualcomm ≫ Sxr2130 Firmware Version -

Qualcomm ≫ Sxr2130 Version -

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.19%	0.086

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
NIST	7.8	1.8	5.9	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
NIST	4.6	3.9	6.4	AV:L/AC:L/Au:N/C:P/I:P/A:P

CWE-125 Out-of-bounds Read

The product reads data past the end, or before the beginning, of the intended buffer.

https://www.qualcomm.com/company/product-security/bulletins/december-2019-bulletin

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2019-10564

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2019-10564

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2019-10564

EUVD