CVE-2019-10605
Summary
| CVE | CVE-2019-10605 |
|---|---|
| State | PUBLIC |
| Assigner | [email protected] |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2019-12-18 06:15:00 UTC |
| Updated | 2019-12-22 13:29:00 UTC |
| Description | Buffer overwrite can occur in IEEE80211 header filling function due to lack of range check of array index received from firmware in Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking in APQ8009, APQ8053, IPQ8074, MDM9607, MDM9650, MSM8909, MSM8939, QCN7605, SDA660, SDM630, SDM636, SDM660, SDX20, SDX24 |
Risk And Classification
Problem Types: CWE-120
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Hardware | Qualcomm | Apq8009 | - | All | All | All |
| Hardware | Qualcomm | Apq8009 | - | All | All | All |
| Operating System | Qualcomm | Apq8009 Firmware | - | All | All | All |
| Operating System | Qualcomm | Apq8009 Firmware | - | All | All | All |
| Hardware | Qualcomm | Apq8053 | - | All | All | All |
| Hardware | Qualcomm | Apq8053 | - | All | All | All |
| Operating System | Qualcomm | Apq8053 Firmware | - | All | All | All |
| Operating System | Qualcomm | Apq8053 Firmware | - | All | All | All |
| Hardware | Qualcomm | Ipq8074 | - | All | All | All |
| Hardware | Qualcomm | Ipq8074 | - | All | All | All |
| Operating System | Qualcomm | Ipq8074 Firmware | - | All | All | All |
| Operating System | Qualcomm | Ipq8074 Firmware | - | All | All | All |
| Hardware | Qualcomm | Mdm9607 | - | All | All | All |
| Hardware | Qualcomm | Mdm9607 | - | All | All | All |
| Operating System | Qualcomm | Mdm9607 Firmware | - | All | All | All |
| Operating System | Qualcomm | Mdm9607 Firmware | - | All | All | All |
| Hardware | Qualcomm | Mdm9650 | - | All | All | All |
| Hardware | Qualcomm | Mdm9650 | - | All | All | All |
| Operating System | Qualcomm | Mdm9650 Firmware | - | All | All | All |
| Operating System | Qualcomm | Mdm9650 Firmware | - | All | All | All |
| Hardware | Qualcomm | Msm8909 | - | All | All | All |
| Hardware | Qualcomm | Msm8909 | - | All | All | All |
| Operating System | Qualcomm | Msm8909 Firmware | - | All | All | All |
| Operating System | Qualcomm | Msm8909 Firmware | - | All | All | All |
| Hardware | Qualcomm | Msm8939 | - | All | All | All |
| Hardware | Qualcomm | Msm8939 | - | All | All | All |
| Operating System | Qualcomm | Msm8939 Firmware | - | All | All | All |
| Operating System | Qualcomm | Msm8939 Firmware | - | All | All | All |
| Hardware | Qualcomm | Qcn7605 | - | All | All | All |
| Hardware | Qualcomm | Qcn7605 | - | All | All | All |
| Operating System | Qualcomm | Qcn7605 Firmware | - | All | All | All |
| Operating System | Qualcomm | Qcn7605 Firmware | - | All | All | All |
| Hardware | Qualcomm | Sda660 | - | All | All | All |
| Hardware | Qualcomm | Sda660 | - | All | All | All |
| Operating System | Qualcomm | Sda660 Firmware | - | All | All | All |
| Operating System | Qualcomm | Sda660 Firmware | - | All | All | All |
| Hardware | Qualcomm | Sdm630 | - | All | All | All |
| Hardware | Qualcomm | Sdm630 | - | All | All | All |
| Operating System | Qualcomm | Sdm630 Firmware | - | All | All | All |
| Operating System | Qualcomm | Sdm630 Firmware | - | All | All | All |
| Hardware | Qualcomm | Sdm636 | - | All | All | All |
| Hardware | Qualcomm | Sdm636 | - | All | All | All |
| Operating System | Qualcomm | Sdm636 Firmware | - | All | All | All |
| Operating System | Qualcomm | Sdm636 Firmware | - | All | All | All |
| Hardware | Qualcomm | Sdm660 | - | All | All | All |
| Hardware | Qualcomm | Sdm660 | - | All | All | All |
| Operating System | Qualcomm | Sdm660 Firmware | - | All | All | All |
| Operating System | Qualcomm | Sdm660 Firmware | - | All | All | All |
| Hardware | Qualcomm | Sdx20 | - | All | All | All |
| Hardware | Qualcomm | Sdx20 | - | All | All | All |
| Operating System | Qualcomm | Sdx20 Firmware | - | All | All | All |
| Operating System | Qualcomm | Sdx20 Firmware | - | All | All | All |
| Hardware | Qualcomm | Sdx24 | - | All | All | All |
| Hardware | Qualcomm | Sdx24 | - | All | All | All |
| Operating System | Qualcomm | Sdx24 Firmware | - | All | All | All |
| Operating System | Qualcomm | Sdx24 Firmware | - | All | All | All |
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| December 2019 Security Bulletin | Qualcomm | CONFIRM | www.qualcomm.com | Patch, Vendor Advisory |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.