NetSight
high7.8

CVE-2019-10601

Out of bound access can occur while processing firmware event due to lack of validation of WMI message received from firmware in Snapdragon Auto, Snapdragon Co…

Impact

Out of bound access can occur while processing firmware event due to lack of validation of WMI message received from firmware in Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking in APQ8096AU, IPQ4019, IPQ8064, IPQ8074, MSM8996AU, Nicobar, QCA6574AU, QCN7605, QCS405, SDM630, SDM636, SDM660, SDM845, SM6150, SM7150, SM8150

Affected products

VendorProductAffected versions
QualcommApq8096au Firmware
All versions
QualcommIpq4019 Firmware
All versions
QualcommIpq8064 Firmware
All versions
QualcommIpq8074 Firmware
All versions
QualcommMsm8996au Firmware
All versions
QualcommNicobar Firmware
All versions
QualcommQca6574au Firmware
All versions
QualcommQcn7605 Firmware
All versions
QualcommQcs405 Firmware
All versions
QualcommSdm630 Firmware
All versions
QualcommSdm636 Firmware
All versions
QualcommSdm660 Firmware
All versions

Weakness classification

References