CVE-2019-10574: High severity qualcomm apq8009w firmware vulnerability
Lack of boundary checks for data offsets received from HLOS can lead to out-of-bound read in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking in APQ8009, APQ8016, APQ8017, APQ8053, APQ8076, APQ8096, APQ8096AU, APQ8098, MDM9150, MDM9205, MDM9206, MDM9207C, MDM9607, MDM9640, MDM9650, MDM9655, MSM8905, MSM8909, MSM8909W, MSM8917, MSM8920, MSM8937, MSM8940, MSM8953, MSM8996, MSM8996AU, MSM8998, QCM2150, QCS605, QM215, Rennell, SC7180, SDA660, SDA845, SDM429, SDM429W, SDM439, SDM450, SDM630, SDM632, SDM636, SDM660, SDM670, SDM710, SDM845, SDM850, SM6150, SM7150, SM8150, SXR1130, SXR2130
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2019-10574?
CVE-2019-10574 has been classified with a high severity due to the potential for out-of-bounds read vulnerabilities.
How do I fix CVE-2019-10574?
To fix CVE-2019-10574, it is recommended to update the Qualcomm firmware to the latest version provided by Qualcomm.
Which devices are affected by CVE-2019-10574?
CVE-2019-10574 affects various Qualcomm Snapdragon chipsets including the APQ8009, APQ8016, and several others in the list.
Can CVE-2019-10574 be remotely exploited?
Yes, CVE-2019-10574 can potentially be remotely exploited if the vulnerable firmware is exposed to malicious inputs.
What are the potential impacts of CVE-2019-10574?
The potential impacts of CVE-2019-10574 include unauthorized access to sensitive information or system crashes due to out-of-bounds memory issues.