CVE-2019-10482: High severity Google Android vulnerability
Due to the use of non-time-constant comparison functions there is issue in timing side channels which can be used as a potential side channel for SUI corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking in APQ8009, APQ8017, APQ8053, APQ8096, APQ8096AU, APQ8098, MDM9150, MDM9205, MDM9206, MDM9607, MDM9650, MSM8905, MSM8909, MSM8917, MSM8920, MSM8937, MSM8940, MSM8953, MSM8996, MSM8996AU, MSM8998, Nicobar, QCS404, QCS405, QCS605, QM215, SA6155P, SC8180X, SDA660, SDA845, SDM429, SDM439, SDM450, SDM630, SDM632, SDM636, SDM660, SDM670, SDM710, SDM845, SDM850, SDX24, SDX55, SM6150, SM7150, SM8150, SM8250, SXR1130, SXR2130
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2019-10482?
CVE-2019-10482 has a medium severity rating due to potential timing side channel vulnerabilities.
How do I fix CVE-2019-10482?
To fix CVE-2019-10482, apply the security updates provided in the latest firmware from Qualcomm or your device manufacturer.
Which devices are affected by CVE-2019-10482?
CVE-2019-10482 affects various Qualcomm Snapdragon chipsets including models used in mobile, automotive, and IoT devices.
What type of vulnerability is CVE-2019-10482?
CVE-2019-10482 is a timing side channel vulnerability that may lead to information leakage.
Is CVE-2019-10482 exploitable?
Yes, CVE-2019-10482 can be potentially exploited to achieve SUI corruption under certain conditions.