7.8

CVE-2019-10592

Possible integer overflow while multiplying two integers of 32 bit in QDCM API of get display modes as there is no check on the maximum mode count in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in APQ8017, APQ8053, APQ8096AU, APQ8098, MDM9206, MDM9207C, MDM9607, MSM8909, MSM8909W, MSM8917, MSM8920, MSM8937, MSM8940, MSM8953, MSM8996AU, MSM8998, Nicobar, QCS405, QCS605, QM215, SDA660, SDA845, SDM429, SDM439, SDM450, SDM630, SDM632, SDM636, SDM660, SDM670, SDM710, SDM845, SDX20, SM6150, SM7150, SM8150, SM8250, SXR1130, SXR2130

Data is provided by the National Vulnerability Database (NVD)
Qualcomm ≫ Apq8017 Firmware Version-
   Qualcomm ≫ Apq8017 Version-
Qualcomm ≫ Apq8053 Firmware Version-
   Qualcomm ≫ Apq8053 Version-
Qualcomm ≫ Apq8096au Firmware Version-
   Qualcomm ≫ Apq8096au Version-
Qualcomm ≫ Apq8098 Firmware Version-
   Qualcomm ≫ Apq8098 Version-
Qualcomm ≫ Mdm9206 Firmware Version-
   Qualcomm ≫ Mdm9206 Version-
Qualcomm ≫ Mdm9207c Firmware Version-
   Qualcomm ≫ Mdm9207c Version-
Qualcomm ≫ Mdm9607 Firmware Version-
   Qualcomm ≫ Mdm9607 Version-
Qualcomm ≫ Msm8909 Firmware Version-
   Qualcomm ≫ Msm8909 Version-
Qualcomm ≫ Msm8909w Firmware Version-
   Qualcomm ≫ Msm8909w Version-
Qualcomm ≫ Msm8917 Firmware Version-
   Qualcomm ≫ Msm8917 Version-
Qualcomm ≫ Msm8920 Firmware Version-
   Qualcomm ≫ Msm8920 Version-
Qualcomm ≫ Msm8937 Firmware Version-
   Qualcomm ≫ Msm8937 Version-
Qualcomm ≫ Msm8940 Firmware Version-
   Qualcomm ≫ Msm8940 Version-
Qualcomm ≫ Msm8953 Firmware Version-
   Qualcomm ≫ Msm8953 Version-
Qualcomm ≫ Msm8996au Firmware Version-
   Qualcomm ≫ Msm8996au Version-
Qualcomm ≫ Msm8998 Firmware Version-
   Qualcomm ≫ Msm8998 Version-
Qualcomm ≫ Nicobar Firmware Version-
   Qualcomm ≫ Nicobar Version-
Qualcomm ≫ Qcs405 Firmware Version-
   Qualcomm ≫ Qcs405 Version-
Qualcomm ≫ Qcs605 Firmware Version-
   Qualcomm ≫ Qcs605 Version-
Qualcomm ≫ Qm215 Firmware Version-
   Qualcomm ≫ Qm215 Version-
Qualcomm ≫ Sda660 Firmware Version-
   Qualcomm ≫ Sda660 Version-
Qualcomm ≫ Sda845 Firmware Version-
   Qualcomm ≫ Sda845 Version-
Qualcomm ≫ Sdm429 Firmware Version-
   Qualcomm ≫ Sdm429 Version-
Qualcomm ≫ Sdm439 Firmware Version-
   Qualcomm ≫ Sdm439 Version-
Qualcomm ≫ Sdm450 Firmware Version-
   Qualcomm ≫ Sdm450 Version-
Qualcomm ≫ Sdm630 Firmware Version-
   Qualcomm ≫ Sdm630 Version-
Qualcomm ≫ Sdm632 Firmware Version-
   Qualcomm ≫ Sdm632 Version-
Qualcomm ≫ Sdm636 Firmware Version-
   Qualcomm ≫ Sdm636 Version-
Qualcomm ≫ Sdm660 Firmware Version-
   Qualcomm ≫ Sdm660 Version-
Qualcomm ≫ Sdm670 Firmware Version-
   Qualcomm ≫ Sdm670 Version-
Qualcomm ≫ Sdm710 Firmware Version-
   Qualcomm ≫ Sdm710 Version-
Qualcomm ≫ Sdm845 Firmware Version-
   Qualcomm ≫ Sdm845 Version-
Qualcomm ≫ Sdx20 Firmware Version-
   Qualcomm ≫ Sdx20 Version-
Qualcomm ≫ Sm6150 Firmware Version-
   Qualcomm ≫ Sm6150 Version-
Qualcomm ≫ Sm7150 Firmware Version-
   Qualcomm ≫ Sm7150 Version-
Qualcomm ≫ Sm8150 Firmware Version-
   Qualcomm ≫ Sm8150 Version-
Qualcomm ≫ Sm8250 Firmware Version-
   Qualcomm ≫ Sm8250 Version-
Qualcomm ≫ Sxr1130 Firmware Version-
   Qualcomm ≫ Sxr1130 Version-
Qualcomm ≫ Sxr2130 Firmware Version-
   Qualcomm ≫ Sxr2130 Version-
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 0.04% 0.097
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 7.8 1.8 5.9
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
nvd@nist.gov 4.6 3.9 6.4
AV:L/AC:L/Au:N/C:P/I:P/A:P
CWE-190 Integer Overflow or Wraparound

The product performs a calculation that can produce an integer overflow or wraparound when the logic assumes that the resulting value will always be larger than the original value. This occurs when an integer value is incremented to a value that is too large to store in the associated representation. When this occurs, the value may become a very small or negative number.