NetSight
critical9.1

CVE-2019-10622

Out of bound memory access can happen while parsing ADSP message due to lack of check of size of payload received from userspace in Snapdragon Auto, Snapdragon…

Impact

Out of bound memory access can happen while parsing ADSP message due to lack of check of size of payload received from userspace in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wired Infrastructure and Networking in APQ8009, APQ8096AU, IPQ4019, IPQ6018, IPQ8064, IPQ8074, MDM9206, MDM9207C, MDM9607, MDM9640, MDM9650, QCN7605, QCS605, SC8180X, SDM710, SDX24, SDX55, SM8150, SM8250, SXR2130

Affected products

VendorProductAffected versions
QualcommApq8009 Firmware
All versions
QualcommApq8096au Firmware
All versions
QualcommIpq4019 Firmware
All versions
QualcommIpq6018 Firmware
All versions
QualcommIpq8064 Firmware
All versions
QualcommIpq8074 Firmware
All versions
QualcommMdm9206 Firmware
All versions
QualcommMdm9207c Firmware
All versions
QualcommMdm9607 Firmware
All versions
QualcommMdm9640 Firmware
All versions
QualcommMdm9650 Firmware
All versions
QualcommQcn7605 Firmware
All versions

Weakness classification

References