critical9.8
CVE-2019-10589
Lack of length check of response buffer can lead to buffer over-flow while GP command response buffer handling in Snapdragon Auto, Snapdragon Compute, Snapdrag…
Impact
Lack of length check of response buffer can lead to buffer over-flow while GP command response buffer handling in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking in APQ8017, APQ8053, APQ8098, MDM9206, MDM9607, MSM8917, MSM8920, MSM8937, MSM8940, MSM8953, MSM8998, QM215, SDA660, SDM429, SDM439, SDM450, SDM630, SDM632, SDM636, SDM660
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Qualcomm | Apq8017 Firmware | All versions |
| Qualcomm | Apq8053 Firmware | All versions |
| Qualcomm | Apq8098 Firmware | All versions |
| Qualcomm | Mdm9206 Firmware | All versions |
| Qualcomm | Mdm9607 Firmware | All versions |
| Qualcomm | Msm8917 Firmware | All versions |
| Qualcomm | Msm8920 Firmware | All versions |
| Qualcomm | Msm8937 Firmware | All versions |
| Qualcomm | Msm8940 Firmware | All versions |
| Qualcomm | Msm8953 Firmware | All versions |
| Qualcomm | Msm8998 Firmware | All versions |
| Qualcomm | Qm215 Firmware | All versions |