NetSight
high7.1

CVE-2019-10623

Possible integer overflow can happen in host driver while processing user controlled string due to improper validation on data received.

Impact

Possible integer overflow can happen in host driver while processing user controlled string due to improper validation on data received. in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile in QCN7605, QCS605, Rennell, SC8180X, SDA845, SDM710, SDX24, SDX55, SM7150, SM8150, SM8250, SXR2130

Affected products

VendorProductAffected versions
QualcommQcn7605 Firmware
All versions
QualcommQcs605 Firmware
All versions
QualcommRennell Firmware
All versions
QualcommSc8180x Firmware
All versions
QualcommSda845 Firmware
All versions
QualcommSdm710 Firmware
All versions
QualcommSdx24 Firmware
All versions
QualcommSdx55 Firmware
All versions
QualcommSm7150 Firmware
All versions
QualcommSm8150 Firmware
All versions
QualcommSm8250 Firmware
All versions
QualcommSxr2130 Firmware
All versions

Weakness classification

References