CVE-2019-10510: Null Pointer Dereference
BT process died and BT toggled due to null pointer dereference when invalid vendor pass through command sent from remote in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Mobile, Snapdragon Voice & Music in QCS405, QCS605, SD 636, SD 675, SD 730, SD 820A, SD 835, SD 845 / SD 850, SD 855, SDM630, SDM660
Affected Software
Remediation
Event History
Frequently Asked Questions
What is CVE-2019-10510?
CVE-2019-10510 is a vulnerability that can cause the BT process to crash and BT to toggle due to a null pointer dereference when an invalid vendor pass through command is sent from a remote device.
Which software is affected by CVE-2019-10510?
CVE-2019-10510 affects Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Mobile, Snapdragon Voice & Music in QCS405, QCS605, SD 636, SD 675, SD 730, SD 820A, SD 835, SD 845 / SD 850, SD 855, SDM63.
What is the severity of CVE-2019-10510?
The severity of CVE-2019-10510 is high, with a CVSS score of 8.2.
How can I fix CVE-2019-10510?
To fix CVE-2019-10510, update your software to the latest version provided by Qualcomm or the respective vendor.
Can I find more information about CVE-2019-10510?
Yes, you can find more information about CVE-2019-10510 in the references provided: [Link to Source Code Aurora](https://source.codeaurora.org/quic/la/platform/vendor/qcom-opensource/system/bt/commit/?id=d005a97b4daa188a15696c46c72b67e5f49f7fc6), [Link to Android Security Bulletin](https://source.android.com/docs/security/bulletin/2019-08-01), [Link to Code Aurora Security Bulletin](https://www.codeaurora.org/security-bulletin/2019/08/05/august-2019-code-aurora-security-bulletin).