NetSight
high8.2

CVE-2019-10510

BT process died and BT toggled due to null pointer dereference when invalid vendor pass through command sent from remote in Snapdragon Auto, Snapdragon Consume…

Impact

BT process died and BT toggled due to null pointer dereference when invalid vendor pass through command sent from remote in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Mobile, Snapdragon Voice & Music in QCS405, QCS605, SD 636, SD 675, SD 730, SD 820A, SD 835, SD 845 / SD 850, SD 855, SDM630, SDM660

Affected products

VendorProductAffected versions
QualcommQcs405 Firmware
All versions
QualcommQcs605 Firmware
All versions
QualcommSd 636 Firmware
All versions
QualcommSd 675 Firmware
All versions
QualcommSd 730 Firmware
All versions
QualcommSd 820a Firmware
All versions
QualcommSd 835 Firmware
All versions
QualcommSd 845 Firmware
All versions
QualcommSd 850 Firmware
All versions
QualcommSd 855 Firmware
All versions
QualcommSdm630 Firmware
All versions
QualcommSdm660 Firmware
All versions

Weakness classification

References