First published: Mon Sep 30 2019(Updated: )
Lack of input validation for data received from user space can lead to OOB access in WLAN in Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in MDM9150, MDM9206, MDM9607, MDM9640, MDM9650, MSM8909W, MSM8996AU, QCA6174A, QCA6574AU, QCA9377, QCA9379, SD 210/SD 212/SD 205, SD 425, SD 430, SD 600, SD 615/16/SD 415, SD 625, SD 632, SD 650/52, SD 820A, SDX20
Credit: product-security@qualcomm.com
Affected Software | Affected Version | How to fix |
---|---|---|
Google Android | ||
Google Android | ||
Qualcomm Mdm9206 Firmware | ||
Qualcomm Mdm9206 | ||
Google Android | ||
Qualcomm Mdm9607 | ||
Qualcomm Mdm9640 Firmware | ||
Qualcomm Mdm9640 | ||
Qualcomm Mdm9650 Firmware | ||
Qualcomm Mdm9650 | ||
Google Android | ||
Google Android | ||
Google Android | ||
Qualcomm Msm8996au | ||
Google Android | ||
Google Android | ||
Google Android | ||
Qualcomm Qca6574au | ||
Google Android | ||
Google Android | ||
Google Android | ||
Google Android | ||
Qualcomm Sd 210 Firmware | ||
Qualcomm Sd 210 | ||
Qualcomm Sd 212 Firmware | ||
Qualcomm Sd 212 | ||
Qualcomm Sd 205 Firmware | ||
Qualcomm Sd 205 | ||
Qualcomm Sd 425 Firmware | ||
Qualcomm Sd 425 | ||
Qualcomm Sd 430 Firmware | ||
Google Android | ||
Qualcomm Sd 600 Firmware | ||
Qualcomm Sd 600 | ||
Google Android | ||
Google Android | ||
Qualcomm Sd 616 Firmware | ||
Qualcomm Sd 616 | ||
Qualcomm Sd 415 Firmware | ||
Qualcomm Sd 415 | ||
Qualcomm Sd 625 Firmware | ||
Qualcomm Sd 625 | ||
Qualcomm Sd 632 Firmware | ||
Qualcomm Sd 632 | ||
Google Android | ||
Qualcomm Sd 650 | ||
Google Android | ||
Qualcomm Sd 652 | ||
Qualcomm Sd 820a Firmware | ||
Qualcomm Sd 820a | ||
Google Android | ||
Qualcomm Sdx20 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
The severity of CVE-2019-10508 is high with a severity value of 7.8.
To fix CVE-2019-10508, it is recommended to apply the latest security patches provided by the software vendor.
CVE-2019-10508 affects Qualcomm Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in MDM9150.
The Common Weakness Enumeration (CWE) IDs for CVE-2019-10508 are CWE-20 and CWE-120.
You can find more information about CVE-2019-10508 in the August 2019 Code Aurora Security Bulletin.