What is the severity of CVE-2019-10526?

CVE-2019-10526 has been classified as a high severity vulnerability due to its potential impact on device security.

How do I fix CVE-2019-10526?

To fix CVE-2019-10526, users should update their affected Snapdragon device firmware to the latest version provided by Qualcomm.

What devices are affected by CVE-2019-10526?

CVE-2019-10526 affects various Qualcomm Snapdragon devices across multiple product lines including automotive, consumer electronics, and mobile devices.

What kind of vulnerability is CVE-2019-10526?

CVE-2019-10526 is an out-of-bounds write vulnerability that can allow an attacker to potentially execute arbitrary code.

Can CVE-2019-10526 lead to remote exploitation?

Yes, CVE-2019-10526 can potentially be exploited remotely through malicious wireless network connections.

Vulnerability/
CVE-2019-10526

critical

CWE

787

2/3/2020

5/3/2020

26/8/2024

CVE-2019-10526

First published: Mon Mar 02 2020(Updated: )

Out of bound write in WLAN driver due to NULL character not properly placed after SSID name in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music in APQ8009, APQ8017, APQ8053, APQ8096AU, MDM9150, MDM9206, MDM9207C, MDM9607, MDM9640, MDM9650, MSM8917, MSM8920, MSM8937, MSM8940, MSM8953, MSM8996AU, QCA6174A, QCA6574AU, QCA9377, QCA9379, QCN7605, QCS405, QCS605, SC8180X, SDA845, SDM450, SDX20, SDX24, SDX55, SXR1130

Credit: product-security@qualcomm.com

Affected Software	Affected Version	How to fix
Android
Qualcomm APQ8009W Firmware
Qualcomm APQ8009W
Qualcomm APQ8017
Qualcomm APQ8017
qualcomm apq8053-ac firmware
Qualcomm APQ8053 Firmware
Qualcomm APQ8096AU Firmware
Qualcomm APQ8096AU Firmware
Qualcomm MDM9150 firmware
Qualcomm MDM9150 firmware
Qualcomm MDM9206
Qualcomm MDM9206 firmware
qualcomm MDM9207C firmware
Qualcomm 9207 LTE Modem
Qualcomm MD9607 Firmware
Qualcomm MDM9607 firmware
qualcomm mdm9640 firmware
Qualcomm MDM9640
Qualcomm MDM9650
Qualcomm MDM9650 firmware
Qualcomm MSM8917
Qualcomm MSM8917 Firmware
Qualcomm 8920 Firmware
Qualcomm 8920
Qualcomm 8937 Firmware
qualcomm MSM8937 firmware
qualcomm MSM8940 firmware
Qualcomm 8940
Qualcomm 8953 Firmware
Qualcomm MSM8953 Firmware
qualcomm MSM8996AU firmware
Qualcomm MSM8996AU Firmware
Qualcomm QCA6174A Firmware
Qualcomm QCA6174A Firmware
Qualcomm QCA6574 Firmware
Qualcomm QCA6574AU
Qualcomm QCA9377 Firmware
Qualcomm QCA9377 Firmware
Qualcomm QCA9379
Qualcomm QCA9379
Qualcomm QCN7605 Firmware
Qualcomm QCN7605 Firmware
Qualcomm QCS405 Firmware
Qualcomm QCS405 Firmware
Qualcomm ZZ QCS605 firmware
Qualcomm QCS605 Firmware
qualcomm SC8180X firmware
Qualcomm SC8180X
Qualcomm SD845 Firmware
Qualcomm Snapdragon 845
Qualcomm SD 450 Firmware
Qualcomm Snapdragon 450
Qualcomm SDX20 Firmware
Qualcomm SDX20 Firmware
Qualcomm SDX24
Qualcomm SDX24
Qualcomm SDX55M Firmware
Qualcomm SDX55 Firmware
Qualcomm SXR1130
Qualcomm SXR1130 Firmware

Remedy

https://www.qualcomm.com/company/product-security/bulletins/march-2020-bulletin

Never miss a vulnerability like this again

Reference Links

Frequently Asked Questions

What is the severity of CVE-2019-10526?
CVE-2019-10526 has been classified as a high severity vulnerability due to its potential impact on device security.
How do I fix CVE-2019-10526?
To fix CVE-2019-10526, users should update their affected Snapdragon device firmware to the latest version provided by Qualcomm.
What devices are affected by CVE-2019-10526?
CVE-2019-10526 affects various Qualcomm Snapdragon devices across multiple product lines including automotive, consumer electronics, and mobile devices.
What kind of vulnerability is CVE-2019-10526?
CVE-2019-10526 is an out-of-bounds write vulnerability that can allow an attacker to potentially execute arbitrary code.
Can CVE-2019-10526 lead to remote exploitation?
Yes, CVE-2019-10526 can potentially be exploited remotely through malicious wireless network connections.