ID CVE-2019-10481
Summary Out of bound access occurs while handling the WMI FW event due to lack of check of buffer argument which comes directly from the WLAN FW in Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking in APQ8096AU, IPQ4019, IPQ8064, IPQ8074, MDM9607, MSM8996AU, QCA6574AU, QCA8081, QCN7605, SDX55, SM6150, SM7150, SM8150
References
Vulnerable Configurations
  • cpe:2.3:o:qualcomm:apq8096au_firmware:-:*:*:*:*:*:*:*
    cpe:2.3:o:qualcomm:apq8096au_firmware:-:*:*:*:*:*:*:*
  • cpe:2.3:h:qualcomm:apq8096au:-:*:*:*:*:*:*:*
    cpe:2.3:h:qualcomm:apq8096au:-:*:*:*:*:*:*:*
  • cpe:2.3:o:qualcomm:ipq4019_firmware:-:*:*:*:*:*:*:*
    cpe:2.3:o:qualcomm:ipq4019_firmware:-:*:*:*:*:*:*:*
  • cpe:2.3:h:qualcomm:ipq4019:-:*:*:*:*:*:*:*
    cpe:2.3:h:qualcomm:ipq4019:-:*:*:*:*:*:*:*
  • cpe:2.3:o:qualcomm:ipq8064_firmware:-:*:*:*:*:*:*:*
    cpe:2.3:o:qualcomm:ipq8064_firmware:-:*:*:*:*:*:*:*
  • cpe:2.3:h:qualcomm:ipq8064:-:*:*:*:*:*:*:*
    cpe:2.3:h:qualcomm:ipq8064:-:*:*:*:*:*:*:*
  • cpe:2.3:o:qualcomm:ipq8074_firmware:-:*:*:*:*:*:*:*
    cpe:2.3:o:qualcomm:ipq8074_firmware:-:*:*:*:*:*:*:*
  • cpe:2.3:h:qualcomm:ipq8074:-:*:*:*:*:*:*:*
    cpe:2.3:h:qualcomm:ipq8074:-:*:*:*:*:*:*:*
  • cpe:2.3:o:qualcomm:mdm9607_firmware:-:*:*:*:*:*:*:*
    cpe:2.3:o:qualcomm:mdm9607_firmware:-:*:*:*:*:*:*:*
  • cpe:2.3:h:qualcomm:mdm9607:-:*:*:*:*:*:*:*
    cpe:2.3:h:qualcomm:mdm9607:-:*:*:*:*:*:*:*
  • cpe:2.3:o:qualcomm:msm8996au_firmware:-:*:*:*:*:*:*:*
    cpe:2.3:o:qualcomm:msm8996au_firmware:-:*:*:*:*:*:*:*
  • cpe:2.3:h:qualcomm:msm8996au:-:*:*:*:*:*:*:*
    cpe:2.3:h:qualcomm:msm8996au:-:*:*:*:*:*:*:*
  • cpe:2.3:o:qualcomm:qca6574au_firmware:-:*:*:*:*:*:*:*
    cpe:2.3:o:qualcomm:qca6574au_firmware:-:*:*:*:*:*:*:*
  • cpe:2.3:h:qualcomm:qca6574au:-:*:*:*:*:*:*:*
    cpe:2.3:h:qualcomm:qca6574au:-:*:*:*:*:*:*:*
  • cpe:2.3:o:qualcomm:qca8081_firmware:-:*:*:*:*:*:*:*
    cpe:2.3:o:qualcomm:qca8081_firmware:-:*:*:*:*:*:*:*
  • cpe:2.3:h:qualcomm:qca8081:-:*:*:*:*:*:*:*
    cpe:2.3:h:qualcomm:qca8081:-:*:*:*:*:*:*:*
  • cpe:2.3:o:qualcomm:qcn7605_firmware:-:*:*:*:*:*:*:*
    cpe:2.3:o:qualcomm:qcn7605_firmware:-:*:*:*:*:*:*:*
  • cpe:2.3:h:qualcomm:qcn7605:-:*:*:*:*:*:*:*
    cpe:2.3:h:qualcomm:qcn7605:-:*:*:*:*:*:*:*
  • cpe:2.3:o:qualcomm:sdx55_firmware:-:*:*:*:*:*:*:*
    cpe:2.3:o:qualcomm:sdx55_firmware:-:*:*:*:*:*:*:*
  • cpe:2.3:h:qualcomm:sdx55:-:*:*:*:*:*:*:*
    cpe:2.3:h:qualcomm:sdx55:-:*:*:*:*:*:*:*
  • cpe:2.3:o:qualcomm:sm6150_firmware:-:*:*:*:*:*:*:*
    cpe:2.3:o:qualcomm:sm6150_firmware:-:*:*:*:*:*:*:*
  • cpe:2.3:h:qualcomm:sm6150:-:*:*:*:*:*:*:*
    cpe:2.3:h:qualcomm:sm6150:-:*:*:*:*:*:*:*
  • cpe:2.3:o:qualcomm:sm7150_firmware:-:*:*:*:*:*:*:*
    cpe:2.3:o:qualcomm:sm7150_firmware:-:*:*:*:*:*:*:*
  • cpe:2.3:h:qualcomm:sm7150:-:*:*:*:*:*:*:*
    cpe:2.3:h:qualcomm:sm7150:-:*:*:*:*:*:*:*
  • cpe:2.3:o:qualcomm:sm8150_firmware:-:*:*:*:*:*:*:*
    cpe:2.3:o:qualcomm:sm8150_firmware:-:*:*:*:*:*:*:*
  • cpe:2.3:h:qualcomm:sm8150:-:*:*:*:*:*:*:*
    cpe:2.3:h:qualcomm:sm8150:-:*:*:*:*:*:*:*
CVSS
Base: 7.2 (as of 23-12-2019 - 17:10)
Impact:
Exploitability:
CWE CWE-129
CAPEC
  • Overflow Buffers
    Buffer Overflow attacks target improper or missing bounds checking on buffer operations, typically triggered by input injected by an adversary. As a consequence, an adversary is able to write past the boundaries of allocated buffer regions in memory, causing a program crash or potentially redirection of execution as per the adversaries' choice.
Access
VectorComplexityAuthentication
LOCAL LOW NONE
Impact
ConfidentialityIntegrityAvailability
COMPLETE COMPLETE COMPLETE
cvss-vector via4 AV:L/AC:L/Au:N/C:C/I:C/A:C
refmap via4
confirm https://www.qualcomm.com/company/product-security/bulletins/december-2019-bulletin
Last major update 23-12-2019 - 17:10
Published 18-12-2019 - 06:15
Last modified 23-12-2019 - 17:10
Back to Top