CVE-2019-10577: Input Validation
Improper input validation while processing SIP URI received from the network will lead to buffer over-read and then to denial of service in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in APQ8009, APQ8017, APQ8053, APQ8096, APQ8096AU, APQ8098, MDM9150, MDM9205, MDM9206, MDM9607, MDM9615, MDM9625, MDM9635M, MDM9640, MDM9645, MDM9650, MDM9655, MSM8905, MSM8909, MSM8909W, MSM8917, MSM8920, MSM8937, MSM8940, MSM8953, MSM8996AU, MSM8998, Nicobar, QCM2150, QCS605, QM215, Rennell, Saipan, SC8180X, SDA660, SDA845, SDM429, SDM429W, SDM439, SDM450, SDM630, SDM632, SDM636, SDM660, SDM670, SDM710, SDM845, SDM850, SDX20, SDX24, SDX55, SM6150, SM7150, SM8150, SM8250, SXR1130, SXR2130
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2019-10577?
The severity of CVE-2019-10577 is classified as high due to potential denial of service caused by improper input validation.
How do I fix CVE-2019-10577?
To fix CVE-2019-10577, update the affected Qualcomm firmware and apply the latest security patches provided by the vendor.
Which devices are affected by CVE-2019-10577?
CVE-2019-10577 affects various Qualcomm Snapdragon devices, including those in automotive, IoT, and mobile segments.
Can CVE-2019-10577 be exploited remotely?
Yes, CVE-2019-10577 can be exploited remotely via malformed SIP URIs processed across network communications.
What kind of attacks can CVE-2019-10577 lead to?
CVE-2019-10577 can lead to denial of service attacks, causing affected devices to crash or become unresponsive.