CVE-2019-10624
Summary
| CVE | CVE-2019-10624 |
|---|---|
| State | PUBLIC |
| Assigner | [email protected] |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2020-04-16 11:15:00 UTC |
| Updated | 2021-07-21 11:39:00 UTC |
| Description | While handling the vendor command there is an integer truncation issue that could yield a buffer overflow due to int data type copied to u8 data type in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile in APQ8096AU, MSM8996AU, QCA6574AU, QCN7605, Rennell, SC8180X, SDM710, SDX55, SM7150, SM8150, SM8250, SXR2130 |
Risk And Classification
Problem Types: CWE-119 | CWE-681
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Hardware | Qualcomm | Apq8096au | - | All | All | All |
| Hardware | Qualcomm | Apq8096au | - | All | All | All |
| Operating System | Qualcomm | Apq8096au Firmware | - | All | All | All |
| Operating System | Qualcomm | Apq8096au Firmware | - | All | All | All |
| Hardware | Qualcomm | Msm8996au | - | All | All | All |
| Hardware | Qualcomm | Msm8996au | - | All | All | All |
| Operating System | Qualcomm | Msm8996au Firmware | - | All | All | All |
| Operating System | Qualcomm | Msm8996au Firmware | - | All | All | All |
| Hardware | Qualcomm | Qca6574au | - | All | All | All |
| Hardware | Qualcomm | Qca6574au | - | All | All | All |
| Operating System | Qualcomm | Qca6574au Firmware | - | All | All | All |
| Operating System | Qualcomm | Qca6574au Firmware | - | All | All | All |
| Hardware | Qualcomm | Qcn7605 | - | All | All | All |
| Hardware | Qualcomm | Qcn7605 | - | All | All | All |
| Operating System | Qualcomm | Qcn7605 Firmware | - | All | All | All |
| Operating System | Qualcomm | Qcn7605 Firmware | - | All | All | All |
| Hardware | Qualcomm | Rennell | - | All | All | All |
| Hardware | Qualcomm | Rennell | - | All | All | All |
| Operating System | Qualcomm | Rennell Firmware | - | All | All | All |
| Operating System | Qualcomm | Rennell Firmware | - | All | All | All |
| Hardware | Qualcomm | Sc8180x | - | All | All | All |
| Hardware | Qualcomm | Sc8180x | - | All | All | All |
| Operating System | Qualcomm | Sc8180x Firmware | - | All | All | All |
| Operating System | Qualcomm | Sc8180x Firmware | - | All | All | All |
| Hardware | Qualcomm | Sdm710 | - | All | All | All |
| Hardware | Qualcomm | Sdm710 | - | All | All | All |
| Operating System | Qualcomm | Sdm710 Firmware | - | All | All | All |
| Operating System | Qualcomm | Sdm710 Firmware | - | All | All | All |
| Hardware | Qualcomm | Sdx55 | - | All | All | All |
| Hardware | Qualcomm | Sdx55 | - | All | All | All |
| Operating System | Qualcomm | Sdx55 Firmware | - | All | All | All |
| Operating System | Qualcomm | Sdx55 Firmware | - | All | All | All |
| Hardware | Qualcomm | Sm7150 | - | All | All | All |
| Hardware | Qualcomm | Sm7150 | - | All | All | All |
| Operating System | Qualcomm | Sm7150 Firmware | - | All | All | All |
| Operating System | Qualcomm | Sm7150 Firmware | - | All | All | All |
| Hardware | Qualcomm | Sm8150 | - | All | All | All |
| Hardware | Qualcomm | Sm8150 | - | All | All | All |
| Operating System | Qualcomm | Sm8150 Firmware | - | All | All | All |
| Operating System | Qualcomm | Sm8150 Firmware | - | All | All | All |
| Hardware | Qualcomm | Sm8250 | - | All | All | All |
| Hardware | Qualcomm | Sm8250 | - | All | All | All |
| Operating System | Qualcomm | Sm8250 Firmware | - | All | All | All |
| Operating System | Qualcomm | Sm8250 Firmware | - | All | All | All |
| Hardware | Qualcomm | Sxr2130 | - | All | All | All |
| Hardware | Qualcomm | Sxr2130 | - | All | All | All |
| Operating System | Qualcomm | Sxr2130 Firmware | - | All | All | All |
| Operating System | Qualcomm | Sxr2130 Firmware | - | All | All | All |
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| April 2020 Bulletin | Qualcomm | CONFIRM | www.qualcomm.com | Patch, Vendor Advisory |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
Legacy QID Mappings
- 610347 Google Android May 2021 Security Patch Missing for Huawei EMUI