CVE-2019-10563: Input Validation
Buffer over-read can occur in fast message handler due to improper input validation while processing a message from firmware in Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music in APQ8053, APQ8096AU, MSM8996AU, MSM8998, QCN7605, QCS405, QCS605, SDA660, SDM636, SDM660, SDX20, SDX24
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2019-10563?
CVE-2019-10563 has been classified as a high severity vulnerability due to its potential to cause buffer over-read issues.
How do I fix CVE-2019-10563?
To mitigate CVE-2019-10563, it is recommended to upgrade to the latest firmware version provided by Qualcomm that addresses this vulnerability.
What systems are affected by CVE-2019-10563?
CVE-2019-10563 affects several Qualcomm chipsets including APQ8053, APQ8096AU, MSM8996AU, MSM8998, and QCS405 among others.
What is the cause of CVE-2019-10563?
CVE-2019-10563 is caused by improper input validation in the fast message handler when processing messages from firmware.
Can exploitation of CVE-2019-10563 lead to data leakage?
Yes, exploitation of CVE-2019-10563 can potentially lead to sensitive data leakage through buffer over-read.