CVE-2019-10551: Critical severity Google Android vulnerability
String error while processing non standard SIP messages received can lead to buffer overread and then denial of service in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in APQ8009, APQ8017, APQ8053, APQ8096, APQ8096AU, APQ8098, MDM9150, MDM9206, MDM9607, MDM9615, MDM9625, MDM9635M, MDM9640, MDM9645, MDM9650, MDM9655, MSM8905, MSM8909, MSM8909W, MSM8917, MSM8920, MSM8937, MSM8940, MSM8953, MSM8996AU, MSM8998, Nicobar, QCM2150, QCS605, QM215, Rennell, SC7180, SC8180X, SDA660, SDA845, SDM429, SDM429W, SDM439, SDM450, SDM630, SDM632, SDM636, SDM660, SDM670, SDM710, SDM845, SDM850, SDX20, SDX24, SDX55, SM6150, SM7150, SM8150, SXR1130
Affected Software
Event History
Frequently Asked Questions
What is CVE-2019-10551?
CVE-2019-10551 is a vulnerability related to string error while processing non-standard SIP messages leading to buffer overread and denial of service in various Qualcomm products.
How severe is CVE-2019-10551?
CVE-2019-10551 has a severity value of 9.1 (Critical).
What software is affected by CVE-2019-10551?
Qualcomm products like Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables are affected.
Are Google Android devices vulnerable to CVE-2019-10551?
Google Android devices with specific firmware versions are affected by CVE-2019-10551.
How can I find more information about CVE-2019-10551?
You can refer to the Qualcomm and Google Android security bulletins from April 2020 for additional details on CVE-2019-10551.