CVE-2019-10591: Null Pointer Dereference
Null pointer dereference can happen when parsing udta atom which is non-standard and having invalid depth in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in APQ8009, APQ8017, APQ8053, APQ8096AU, APQ8098, MDM9206, MDM9207C, MDM9607, MSM8905, MSM8909W, MSM8917, MSM8939, MSM8953, MSM8996, MSM8996AU, MSM8998, Nicobar, QCS405, QCS605, QM215, Rennell, SA6155P, Saipan, SDA660, SDA845, SDM429, SDM429W, SDM439, SDM450, SDM630, SDM632, SDM636, SDM660, SDM670, SDM710, SDM845, SDX20, SM6150, SM7150, SM8150, SM8250, SXR1130, SXR2130
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2019-10591?
CVE-2019-10591 has been assigned a moderate severity level due to the null pointer dereference it can cause.
How do I fix CVE-2019-10591?
To fix CVE-2019-10591, ensure that your device is updated with the latest security patch from Qualcomm or Android.
Which devices are affected by CVE-2019-10591?
CVE-2019-10591 affects various Qualcomm Snapdragon platforms including those used in smartphones and IoT devices.
What type of vulnerability is CVE-2019-10591?
CVE-2019-10591 is a null pointer dereference vulnerability that occurs when parsing non-standard udta atoms.
Is there a workaround for CVE-2019-10591?
Currently, the recommended approach for CVE-2019-10591 is to apply the security patch provided by the vendor.