CVE-2019-10499: Out-of-bounds Read
Improper validation of read and write index of tx and rx fifos before using for data copy from fifo can lead to out-of-bound access. in Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking in IPQ4019, IPQ8064, IPQ8074, QCS405, SD 665, SD 675, SD 730, SD 855
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2019-10499?
The severity of CVE-2019-10499 is high, with a severity value of 7.8.
Which software is affected by CVE-2019-10499?
Qualcomm Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking in IPQ4019, IPQ8064, IPQ8074, QCS405, SD 665, SD 675, SD 730, SD 855 are affected by CVE-2019-10499.
How can out-of-bound access be caused by CVE-2019-10499?
Improper validation of read and write index of tx and rx fifo's before using for data copy from fifo can lead to out-of-bound access in Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking.
How do I fix CVE-2019-10499?
Apply the security patches and firmware updates provided by Qualcomm or Google for the affected software.
Where can I find more information about CVE-2019-10499?
More information about CVE-2019-10499 can be found at the following sources: [source.codeaurora.org](https://source.codeaurora.org/quic/la/kernel/msm-4.14/commit/?id=e5f79b37300b6562c479f96fb3b590d84d03ce96), [source.android.com](https://source.android.com/docs/security/bulletin/2019-08-01), [codeaurora.org](https://www.codeaurora.org/security-bulletin/2019/08/05/august-2019-code-aurora-security-bulletin).