CVE-2019-10589: Critical severity Google Android vulnerability
Lack of length check of response buffer can lead to buffer over-flow while GP command response buffer handling in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking in APQ8017, APQ8053, APQ8098, MDM9206, MDM9607, MSM8917, MSM8920, MSM8937, MSM8940, MSM8953, MSM8998, QM215, SDA660, SDM429, SDM439, SDM450, SDM630, SDM632, SDM636, SDM660
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2019-10589?
CVE-2019-10589 has been classified with a moderate severity level due to the potential for buffer overflow exploits.
How do I fix CVE-2019-10589?
To resolve CVE-2019-10589, users should update their devices to the latest firmware provided by Qualcomm or the device manufacturer.
Which devices are impacted by CVE-2019-10589?
CVE-2019-10589 affects multiple Qualcomm chipsets used in various Android devices including those running Snapdragon Auto, Snapdragon Compute, and Snapdragon Mobile.
What potential consequences does CVE-2019-10589 pose?
CVE-2019-10589 can lead to exploitation possibilities like unauthorized access or system crashes due to buffer overflows.
Is CVE-2019-10589 publicly disclosed?
Yes, CVE-2019-10589 is a publicly disclosed vulnerability and is available in security bulletins from Qualcomm and Android.