NetSight
medium5.5

CVE-2019-10535

Improper validation for loop variable received from firmware can lead to out of bound access in WLAN function while iterating through loop in Snapdragon Auto, …

Impact

Improper validation for loop variable received from firmware can lead to out of bound access in WLAN function while iterating through loop in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music in APQ8053, APQ8096AU, APQ8098, MDM9640, MSM8996AU, MSM8998, QCA6574AU, QCN7605, QCS405, QCS605, SDA845, SDM845, SDX20

Affected products

VendorProductAffected versions
QualcommApq8053 Firmware
All versions
QualcommApq8096au Firmware
All versions
QualcommApq8098 Firmware
All versions
QualcommMdm9640 Firmware
All versions
QualcommMsm8996au Firmware
All versions
QualcommMsm8998 Firmware
All versions
QualcommQca6574au Firmware
All versions
QualcommQcn7605 Firmware
All versions
QualcommQcs405 Firmware
All versions
QualcommQcs605 Firmware
All versions
QualcommSda845 Firmware
All versions
QualcommSdm845 Firmware
All versions

Weakness classification

References