CVE-2019-10487: Critical severity Google Android vulnerability
Buffer over read can happen while parsing SMS OTA messages at transport layer if network sends un-intended values in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in APQ8009, APQ8017, APQ8053, APQ8096, APQ8096AU, APQ8098, MDM9150, MDM9205, MDM9206, MDM9607, MDM9615, MDM9625, MDM9635M, MDM9640, MDM9645, MDM9650, MDM9655, MSM8905, MSM8909, MSM8909W, MSM8917, MSM8920, MSM8937, MSM8939, MSM8940, MSM8953, MSM8996AU, MSM8998, Nicobar, QCM2150, QCS605, QM215, SC8180X, SDA660, SDA845, SDM429, SDM439, SDM450, SDM630, SDM632, SDM636, SDM660, SDM670, SDM710, SDM845, SDM850, SDX20, SDX24, SDX55, SM6150, SM7150, SM8150, SXR1130
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2019-10487?
CVE-2019-10487 is classified as a high severity vulnerability due to the potential for buffer over-read during SMS OTA message parsing.
How do I fix CVE-2019-10487?
To fix CVE-2019-10487, ensure that you update the affected Qualcomm firmware and apply any security patches provided by your manufacturer.
What products are affected by CVE-2019-10487?
CVE-2019-10487 affects various products using Qualcomm's Snapdragon chipsets, including mobile devices and IoT devices.
What type of vulnerability is CVE-2019-10487?
CVE-2019-10487 is a buffer over-read vulnerability that arises from improper validation of data within SMS OTA messages.
Can CVE-2019-10487 be exploited remotely?
Yes, CVE-2019-10487 can be exploited remotely if an attacker sends specially crafted SMS OTA messages to a vulnerable device.