CVE-2019-10588: Critical severity Google Android vulnerability
Copying RTCP messages into the output buffer without checking the destination buffer size which could lead to a remote stack overflow. in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in APQ8009, APQ8017, APQ8053, APQ8076, APQ8096, APQ8096AU, APQ8098, MDM9150, MDM9206, MDM9607, MDM9615, MDM9625, MDM9635M, MDM9640, MDM9645, MDM9650, MDM9655, MSM8905, MSM8909, MSM8909W, MSM8917, MSM8920, MSM8937, MSM8940, MSM8953, MSM8996AU, MSM8998, QCM2150, QCS605, QM215, Rennell, SC7180, SC8180X, SDA660, SDA845, SDM429, SDM429W, SDM439, SDM450, SDM630, SDM632, SDM636, SDM660, SDM670, SDM710, SDM845, SDM850, SDX20, SDX24, SDX55, SM6150, SM7150, SM8150, SXR1130
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2019-10588?
CVE-2019-10588 has a critical severity level due to its potential for remote stack overflow exploitation.
How do I fix CVE-2019-10588?
To fix CVE-2019-10588, update the affected Qualcomm firmware to a version that addresses this vulnerability.
Which devices are affected by CVE-2019-10588?
CVE-2019-10588 affects various Qualcomm Snapdragon firmware versions across different product lines.
What type of vulnerability is CVE-2019-10588?
CVE-2019-10588 is a buffer overflow vulnerability that can lead to remote code execution.
Can CVE-2019-10588 be exploited remotely?
Yes, CVE-2019-10588 can be exploited remotely due to the nature of the buffer overflow in network communications.