CVE-2019-10526
First published: Mon Mar 02 2020(Updated: )
Out of bound write in WLAN driver due to NULL character not properly placed after SSID name in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music in APQ8009, APQ8017, APQ8053, APQ8096AU, MDM9150, MDM9206, MDM9207C, MDM9607, MDM9640, MDM9650, MSM8917, MSM8920, MSM8937, MSM8940, MSM8953, MSM8996AU, QCA6174A, QCA6574AU, QCA9377, QCA9379, QCN7605, QCS405, QCS605, SC8180X, SDA845, SDM450, SDX20, SDX24, SDX55, SXR1130
Credit: product-security@qualcomm.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Android | ||
| Qualcomm APQ8009W Firmware | ||
| Qualcomm APQ8009 Firmware | ||
| Qualcomm APQ8017 | ||
| Qualcomm APQ8017 | ||
| Qualcomm APQ8053 | ||
| Qualcomm APQ8053 Firmware | ||
| Qualcomm APQ8096AU Firmware | ||
| Qualcomm APQ8096AU Firmware | ||
| Qualcomm MDM9150 Firmware | ||
| Qualcomm MDM9150 firmware | ||
| Qualcomm MDM9206 | ||
| Qualcomm MDM9206 firmware | ||
| qualcomm MDM9207C firmware | ||
| Qualcomm 9207 LTE Modem | ||
| Qualcomm MD9607 Firmware | ||
| Qualcomm MDM9607 firmware | ||
| Qualcomm MDM9640 Firmware | ||
| Qualcomm MDM9640 Firmware | ||
| Qualcomm MDM9650 | ||
| Qualcomm MDM9650 firmware | ||
| Qualcomm MSM8917 | ||
| Qualcomm MSM8917 Firmware | ||
| Qualcomm 8920 Firmware | ||
| Qualcomm 8920 | ||
| Qualcomm 8937 Firmware | ||
| qualcomm MSM8937 firmware | ||
| qualcomm MSM8940 firmware | ||
| qualcomm MSM8940 firmware | ||
| Qualcomm 8953Pro Firmware | ||
| Qualcomm MSM8953 Firmware | ||
| qualcomm MSM8996AU firmware | ||
| Qualcomm MSM8996AU Firmware | ||
| Qualcomm QCA6174A Firmware | ||
| Qualcomm QCA6174A Firmware | ||
| Qualcomm QCA6574 Firmware | ||
| Qualcomm QCA6574AU | ||
| Qualcomm QCA9377 Firmware | ||
| Qualcomm QCA9377 Firmware | ||
| Qualcomm QCA9379 | ||
| Qualcomm QCA9379 | ||
| Qualcomm QCN7605 Firmware | ||
| Qualcomm QCN7605 Firmware | ||
| Qualcomm QCS405 Firmware | ||
| Qualcomm QCS405 Firmware | ||
| Qualcomm QCS605 | ||
| Qualcomm QCS605 Firmware | ||
| qualcomm SC8180X firmware | ||
| Qualcomm SC8180X | ||
| Qualcomm SD 845 Firmware | ||
| Qualcomm Snapdragon 845 | ||
| Qualcomm SDM450 | ||
| Qualcomm Snapdragon 450 | ||
| Qualcomm SDX20 Firmware | ||
| Qualcomm SDX20 Firmware | ||
| Qualcomm SDX24 | ||
| Qualcomm SDX24 | ||
| Qualcomm SDX55M Firmware | ||
| Qualcomm SDX55 Firmware | ||
| Qualcomm SXR1130 | ||
| Qualcomm SXR1130 Firmware |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://www.qualcomm.com/company/product-security/bulletins/march-2020-bulletin
- https://source.codeaurora.org/quic/la/platform/vendor/qcom-opensource/wlan/qcacld-3.0/commit/?id=f5e23c59116af3c7b9597c8aebcaeeb9935f1b96
- https://source.codeaurora.org/quic/la/platform/vendor/qcom-opensource/wlan/qcacld-2.0/commit/?id=f7c43c43192396a06b2b12b40934c9e5c79c9911
- https://source.android.com/docs/security/bulletin/2020-03-01 (Advisory)
Frequently Asked Questions
What is the severity of CVE-2019-10526?
CVE-2019-10526 has been classified as a high severity vulnerability due to its potential impact on device security.
How do I fix CVE-2019-10526?
To fix CVE-2019-10526, users should update their affected Snapdragon device firmware to the latest version provided by Qualcomm.
What devices are affected by CVE-2019-10526?
CVE-2019-10526 affects various Qualcomm Snapdragon devices across multiple product lines including automotive, consumer electronics, and mobile devices.
What kind of vulnerability is CVE-2019-10526?
CVE-2019-10526 is an out-of-bounds write vulnerability that can allow an attacker to potentially execute arbitrary code.
Can CVE-2019-10526 lead to remote exploitation?
Yes, CVE-2019-10526 can potentially be exploited remotely through malicious wireless network connections.
- agent/type
- agent/first-publish-date
- agent/remedy
- agent/weakness
- agent/severity
- agent/references
- agent/author
- agent/description
- collector/mitre-cve
- source/MITRE
- agent/event
- agent/last-modified-date
- agent/source
- collector/android-source
- source/Android
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- agent/softwarecombine
- agent/tags
- collector/nvd-index
- vendor/google
- canonical/android
- vendor/qualcomm
- canonical/qualcomm apq8009w firmware
- canonical/qualcomm apq8009 firmware
- canonical/qualcomm apq8017
- canonical/qualcomm apq8053
- canonical/qualcomm apq8053 firmware
- canonical/qualcomm apq8096au firmware
- canonical/qualcomm mdm9150 firmware
- canonical/qualcomm mdm9206
- canonical/qualcomm mdm9206 firmware
- canonical/qualcomm mdm9207c firmware
- canonical/qualcomm 9207 lte modem
- canonical/qualcomm md9607 firmware
- canonical/qualcomm mdm9607 firmware
- canonical/qualcomm mdm9640 firmware
- canonical/qualcomm mdm9650
- canonical/qualcomm mdm9650 firmware
- canonical/qualcomm msm8917
- canonical/qualcomm msm8917 firmware
- canonical/qualcomm 8920 firmware
- canonical/qualcomm 8920
- canonical/qualcomm 8937 firmware
- canonical/qualcomm msm8937 firmware
- canonical/qualcomm msm8940 firmware
- canonical/qualcomm 8953pro firmware
- canonical/qualcomm msm8953 firmware
- canonical/qualcomm msm8996au firmware
- canonical/qualcomm qca6174a firmware
- canonical/qualcomm qca6574 firmware
- canonical/qualcomm qca6574au
- canonical/qualcomm qca9377 firmware
- canonical/qualcomm qca9379
- canonical/qualcomm qcn7605 firmware
- canonical/qualcomm qcs405 firmware
- canonical/qualcomm qcs605
- canonical/qualcomm qcs605 firmware
- canonical/qualcomm sc8180x firmware
- canonical/qualcomm sc8180x
- canonical/qualcomm sd 845 firmware
- canonical/qualcomm snapdragon 845
- canonical/qualcomm sdm450
- canonical/qualcomm snapdragon 450
- canonical/qualcomm sdx20 firmware
- canonical/qualcomm sdx24
- canonical/qualcomm sdx55m firmware
- canonical/qualcomm sdx55 firmware
- canonical/qualcomm sxr1130
- canonical/qualcomm sxr1130 firmware