CVE-2019-10572
Description
Improper check in video driver while processing data from video firmware can lead to integer overflow and then buffer overflow in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in APQ8009, APQ8017, APQ8053, APQ8096AU, APQ8098, MDM9206, MDM9207C, MDM9607, MDM9640, MDM9650, MSM8905, MSM8909W, MSM8917, MSM8920, MSM8937, MSM8940, MSM8953, MSM8996AU, MSM8998, Nicobar, QCS405, QCS605, QM215, SA6155P, SDA660, SDA845, SDM429, SDM439, SDM450, SDM630, SDM632, SDM636, SDM660, SDM670, SDM710, SDM845, SDX20, SDX24, SDX55, SM6150, SM7150, SM8150, SXR1130
Affected products
45- cpe:2.3:o:qualcomm:apq8009_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:qualcomm:apq8017_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:qualcomm:apq8053_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:qualcomm:apq8096au_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:qualcomm:apq8098_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:qualcomm:mdm9206_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:qualcomm:mdm9207c_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:qualcomm:mdm9607_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:qualcomm:mdm9640_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:qualcomm:mdm9650_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:qualcomm:msm8905_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:qualcomm:msm8909w_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:qualcomm:msm8917_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:qualcomm:msm8920_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:qualcomm:msm8937_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:qualcomm:msm8940_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:qualcomm:msm8953_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:qualcomm:msm8996au_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:qualcomm:msm8998_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:qualcomm:nicobar_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:qualcomm:qcs405_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:qualcomm:qcs605_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:qualcomm:qm215_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:qualcomm:sa6155p_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:qualcomm:sda660_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:qualcomm:sda845_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:qualcomm:sdm429_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:qualcomm:sdm439_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:qualcomm:sdm450_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:qualcomm:sdm630_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:qualcomm:sdm632_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:qualcomm:sdm636_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:qualcomm:sdm660_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:qualcomm:sdm670_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:qualcomm:sdm710_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:qualcomm:sdm845_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:qualcomm:sdx20_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:qualcomm:sdx24_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:qualcomm:sdx55_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:qualcomm:sm6150_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:qualcomm:sm7150_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:qualcomm:sm8150_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:qualcomm:sxr1130_firmware:-:*:*:*:*:*:*:*
- Qualcomm, Inc./Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearablesv5Range: APQ8009, APQ8017, APQ8053, APQ8096AU, APQ8098, MDM9206, MDM9207C, MDM9607, MDM9640, MDM9650, MSM8905, MSM8909W, MSM8917, MSM8920, MSM8937, MSM8940, MSM8953, MSM8996AU, MSM8998, Nicobar, QCS405, QCS605, QM215, SA6155P, SDA660, SDA845, SDM429, SDM439, SDM450, SDM630, SDM632, SDM636, SDM660, SDM670, SDM710, SDM845, SDX20, SDX24, SDX55, SM6150, SM7150, SM8150, SXR1130
Patches
Vulnerability mechanics
References
1- www.qualcomm.com/company/product-security/bulletins/december-2019-bulletinnvdPatchVendor Advisory
News mentions
0No linked articles in our index yet.