NetSight
high7.5

CVE-2019-10549

Null pointer dereference issue can happen due to improper validation of CSEQ header response received from network in Snapdragon Auto, Snapdragon Compute, Snap…

Impact

Null pointer dereference issue can happen due to improper validation of CSEQ header response received from network in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables in MSM8905, MSM8909, MSM8917, MSM8920, MSM8937, MSM8940, MSM8953, Nicobar, QCM2150, QM215, Rennell, SC8180X, SDM429, SDM429W, SDM439, SDM450, SDM632, SDX24, SDX55, SM6150, SM7150, SM8150

Affected products

VendorProductAffected versions
QualcommMsm8905 Firmware
All versions
QualcommMsm8909 Firmware
All versions
QualcommMsm8917 Firmware
All versions
QualcommMsm8920 Firmware
All versions
QualcommMsm8937 Firmware
All versions
QualcommMsm8940 Firmware
All versions
QualcommMsm8953 Firmware
All versions
QualcommNicobar Firmware
All versions
QualcommQcm2150 Firmware
All versions
QualcommQm215 Firmware
All versions
QualcommRennell Firmware
All versions
QualcommSc8180x Firmware
All versions

Weakness classification

References