CVE-2019-10539: Buffer Overflow
Possible buffer overflow issue due to lack of length check when parsing the extended cap IE header length in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking in IPQ8074, MDM9206, MDM9607, MDM9640, MDM9650, MSM8996AU, QCA6174A, QCA6574, QCA6574AU, QCA6584, QCA8081, QCA9379, QCS404, QCS405, QCS605, Qualcomm 215, SD 210/SD 212/SD 205, SD 425, SD 427, SD 430, SD 435, SD 439 / SD 429, SD 450, SD 625, SD 632, SD 636, SD 665, SD 675, SD 712 / SD 710 / SD 670, SD 730, SD 820, SD 820A, SD 835, SD 845 / SD 850, SD 855, SD 8CX, SDA660, SDM439, SDM630, SDM660, SDX20, SDX24, SXR1130
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2019-10539?
CVE-2019-10539 is considered a high severity vulnerability due to its potential for exploitation leading to a buffer overflow.
How do I fix CVE-2019-10539?
To address CVE-2019-10539, apply the latest firmware updates from Qualcomm or your device manufacturer that include the security patches.
Which devices are affected by CVE-2019-10539?
CVE-2019-10539 affects a range of Qualcomm devices, including but not limited to various Snapdragon mobile, automotive, IoT, and connectivity chipsets.
What type of vulnerability is CVE-2019-10539?
CVE-2019-10539 is classified as a buffer overflow vulnerability that arises from insufficient length checks in the parsing of specific data structures.
Is there any known exploit for CVE-2019-10539?
As of now, there are no publicly available exploits for CVE-2019-10539, but the nature of the vulnerability means it could be targeted in the future.