10

CVE-2019-10589

Lack of length check of response buffer can lead to buffer over-flow while GP command response buffer handling in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking in APQ8017, APQ8053, APQ8098, MDM9206, MDM9607, MSM8917, MSM8920, MSM8937, MSM8940, MSM8953, MSM8998, QM215, SDA660, SDM429, SDM439, SDM450, SDM630, SDM632, SDM636, SDM660

Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Qualcomm ≫ Apq8017 Firmware Version-
   Qualcomm ≫ Apq8017 Version-
Qualcomm ≫ Apq8053 Firmware Version-
   Qualcomm ≫ Apq8053 Version-
Qualcomm ≫ Apq8098 Firmware Version-
   Qualcomm ≫ Apq8098 Version-
Qualcomm ≫ Mdm9206 Firmware Version-
   Qualcomm ≫ Mdm9206 Version-
Qualcomm ≫ Mdm9607 Firmware Version-
   Qualcomm ≫ Mdm9607 Version-
Qualcomm ≫ Msm8917 Firmware Version-
   Qualcomm ≫ Msm8917 Version-
Qualcomm ≫ Msm8920 Firmware Version-
   Qualcomm ≫ Msm8920 Version-
Qualcomm ≫ Msm8937 Firmware Version-
   Qualcomm ≫ Msm8937 Version-
Qualcomm ≫ Msm8940 Firmware Version-
   Qualcomm ≫ Msm8940 Version-
Qualcomm ≫ Msm8953 Firmware Version-
   Qualcomm ≫ Msm8953 Version-
Qualcomm ≫ Msm8998 Firmware Version-
   Qualcomm ≫ Msm8998 Version-
Qualcomm ≫ Qm215 Firmware Version-
   Qualcomm ≫ Qm215 Version-
Qualcomm ≫ Sda660 Firmware Version-
   Qualcomm ≫ Sda660 Version-
Qualcomm ≫ Sdm429 Firmware Version-
   Qualcomm ≫ Sdm429 Version-
Qualcomm ≫ Sdm439 Firmware Version-
   Qualcomm ≫ Sdm439 Version-
Qualcomm ≫ Sdm450 Firmware Version-
   Qualcomm ≫ Sdm450 Version-
Qualcomm ≫ Sdm630 Firmware Version-
   Qualcomm ≫ Sdm630 Version-
Qualcomm ≫ Sdm632 Firmware Version-
   Qualcomm ≫ Sdm632 Version-
Qualcomm ≫ Sdm636 Firmware Version-
   Qualcomm ≫ Sdm636 Version-
Qualcomm ≫ Sdm660 Firmware Version-
   Qualcomm ≫ Sdm660 Version-
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.33% 0.529
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 9.8 3.9 5.9
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
nvd@nist.gov 10 10 10
AV:N/AC:L/Au:N/C:C/I:C/A:C
CWE-120 Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

The product copies an input buffer to an output buffer without verifying that the size of the input buffer is less than the size of the output buffer, leading to a buffer overflow.