CVE-2019-10606
Summary
| CVE | CVE-2019-10606 |
|---|---|
| State | PUBLIC |
| Assigner | [email protected] |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2020-01-21 07:15:00 UTC |
| Updated | 2020-01-24 13:52:00 UTC |
| Description | Out-of-bound access will occur in USB driver due to lack of check to validate the frame size passed by user in Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables in MDM9607, MSM8909W, MSM8917, MSM8920, MSM8937, MSM8940, QCS605, SDX24 |
Risk And Classification
Problem Types: CWE-120
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Hardware | Qualcomm | Mdm9607 | - | All | All | All |
| Hardware | Qualcomm | Mdm9607 | - | All | All | All |
| Operating System | Qualcomm | Mdm9607 Firmware | - | All | All | All |
| Operating System | Qualcomm | Mdm9607 Firmware | - | All | All | All |
| Hardware | Qualcomm | Msm8909w | - | All | All | All |
| Hardware | Qualcomm | Msm8909w | - | All | All | All |
| Operating System | Qualcomm | Msm8909w Firmware | - | All | All | All |
| Operating System | Qualcomm | Msm8909w Firmware | - | All | All | All |
| Hardware | Qualcomm | Msm8917 | - | All | All | All |
| Hardware | Qualcomm | Msm8917 | - | All | All | All |
| Operating System | Qualcomm | Msm8917 Firmware | - | All | All | All |
| Operating System | Qualcomm | Msm8917 Firmware | - | All | All | All |
| Hardware | Qualcomm | Msm8920 | - | All | All | All |
| Hardware | Qualcomm | Msm8920 | - | All | All | All |
| Operating System | Qualcomm | Msm8920 Firmware | - | All | All | All |
| Operating System | Qualcomm | Msm8920 Firmware | - | All | All | All |
| Hardware | Qualcomm | Msm8937 | - | All | All | All |
| Hardware | Qualcomm | Msm8937 | - | All | All | All |
| Operating System | Qualcomm | Msm8937 Firmware | - | All | All | All |
| Operating System | Qualcomm | Msm8937 Firmware | - | All | All | All |
| Hardware | Qualcomm | Msm8940 | - | All | All | All |
| Hardware | Qualcomm | Msm8940 | - | All | All | All |
| Operating System | Qualcomm | Msm8940 Firmware | - | All | All | All |
| Operating System | Qualcomm | Msm8940 Firmware | - | All | All | All |
| Hardware | Qualcomm | Qcs605 | - | All | All | All |
| Hardware | Qualcomm | Qcs605 | - | All | All | All |
| Operating System | Qualcomm | Qcs605 Firmware | - | All | All | All |
| Operating System | Qualcomm | Qcs605 Firmware | - | All | All | All |
| Hardware | Qualcomm | Sdx24 | - | All | All | All |
| Hardware | Qualcomm | Sdx24 | - | All | All | All |
| Operating System | Qualcomm | Sdx24 Firmware | - | All | All | All |
| Operating System | Qualcomm | Sdx24 Firmware | - | All | All | All |
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| January 2020 Security Bulletin | Qualcomm | CONFIRM | www.qualcomm.com | Patch, Vendor Advisory |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.