CVE-2019-10595: Input Validation
First published: Mon Dec 02 2019(Updated: )
Possible buffer overwrite in message handler due to lack of validation of tid value calculated from packets received from firmware in Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking in APQ8009, APQ8053, APQ8064, APQ8096AU, IPQ4019, IPQ8064, MDM9206, MDM9207C, MDM9607, MDM9615, MDM9640, MDM9650, MSM8909, MSM8909W, MSM8939, MSM8996AU, QCA4531, QCA6174A, QCA6574AU, QCA9377, QCA9379, QCA9558, QCA9880, QCA9886, QCA9980, SDA660, SDM630, SDM636, SDM660, SDX20, SDX24
Credit: product-security@qualcomm.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Google Android | ||
| Qualcomm Apq8009 | ||
| Google Android | ||
| Google Android | ||
| Google Android | ||
| Qualcomm Apq8064 | ||
| Google Android | ||
| Google Android | ||
| Qualcomm Ipq4019 Firmware | ||
| Qualcomm Ipq4019 | ||
| Qualcomm Ipq8064 Firmware | ||
| Qualcomm Ipq8064 | ||
| Qualcomm Mdm9206 Firmware | ||
| Qualcomm Mdm9206 | ||
| Google Android | ||
| Google Android | ||
| Google Android | ||
| Qualcomm Mdm9607 | ||
| Qualcomm Mdm9615 Firmware | ||
| Google Android | ||
| Qualcomm Mdm9640 Firmware | ||
| Qualcomm Mdm9640 | ||
| Qualcomm Mdm9650 Firmware | ||
| Qualcomm Mdm9650 | ||
| Google Android | ||
| Qualcomm Msm8909 | ||
| Google Android | ||
| Google Android | ||
| Google Android | ||
| Qualcomm Msm8996au | ||
| Qualcomm Qca4531 Firmware | ||
| Qualcomm Qca4531 | ||
| Google Android | ||
| Google Android | ||
| Google Android | ||
| Qualcomm Qca6574au | ||
| Google Android | ||
| Google Android | ||
| Google Android | ||
| Google Android | ||
| Qualcomm Qca9558 Firmware | ||
| Qualcomm Qca9558 | ||
| Qualcomm Qca9880 Firmware | ||
| Qualcomm Qca9880 | ||
| Qualcomm Qca9886 Firmware | ||
| Qualcomm Qca9886 | ||
| Qualcomm Qca9980 Firmware | ||
| Qualcomm Qca9980 | ||
| Google Android | ||
| Google Android | ||
| Qualcomm Sdm630 Firmware | ||
| Qualcomm Sdm630 | ||
| Google Android | ||
| Qualcomm Sdm636 | ||
| Qualcomm Sdm660 Firmware | ||
| Qualcomm Sdm660 | ||
| Google Android | ||
| Qualcomm Sdx20 | ||
| Qualcomm Sdx24 Firmware | ||
| Google Android | ||
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is CVE-2019-10595?
CVE-2019-10595 is a vulnerability that allows a possible buffer overwrite in the message handler due to the lack of validation of tid value calculated from packets received from firmware in various Qualcomm products.
Which software is affected by CVE-2019-10595?
The software affected by CVE-2019-10595 includes Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice, and various firmware versions of Qualcomm products such as apq8009, apq8053, apq8064, apq8096au, ipq4019, ipq8064, mdm9206, mdm9207c, mdm9607, mdm9615, mdm9640, mdm9650, msm8909, msm8939, msm8996au, qca4531, qca6174a, qca6574au, qca9377, qca9379, qca9558, qca9880, qca9886, qca9980, sda660, sdm630, sdm636, sdm660, sdx20, and sdx24.
What is the severity of CVE-2019-10595?
The severity of CVE-2019-10595 is rated as high, with a severity value of 7.8.
How can I fix CVE-2019-10595?
To fix CVE-2019-10595, it is recommended to apply the necessary patches and updates provided by Qualcomm and Google. Refer to the references for more information on how to mitigate this vulnerability.
Where can I find more information about CVE-2019-10595?
More information about CVE-2019-10595 can be found in the Qualcomm Product Security Bulletins and the Android Security Bulletin for December 2019.
- collector/nvd-index
- agent/type
- agent/first-publish-date
- agent/author
- agent/severity
- agent/weakness
- agent/remedy
- agent/references
- agent/description
- collector/android-source
- source/Android
- agent/software-canonical-lookup
- agent/last-modified-date
- agent/softwarecombine
- agent/tags
- agent/event
- vendor/qualcomm
- canonical/google android
- canonical/qualcomm apq8009
- canonical/qualcomm apq8064
- canonical/qualcomm ipq4019 firmware
- canonical/qualcomm ipq4019
- canonical/qualcomm ipq8064 firmware
- canonical/qualcomm ipq8064
- canonical/qualcomm mdm9206 firmware
- canonical/qualcomm mdm9206
- canonical/qualcomm mdm9607
- canonical/qualcomm mdm9615 firmware
- canonical/qualcomm mdm9640 firmware
- canonical/qualcomm mdm9640
- canonical/qualcomm mdm9650 firmware
- canonical/qualcomm mdm9650
- canonical/qualcomm msm8909
- canonical/qualcomm msm8996au
- canonical/qualcomm qca4531 firmware
- canonical/qualcomm qca4531
- canonical/qualcomm qca6574au
- canonical/qualcomm qca9558 firmware
- canonical/qualcomm qca9558
- canonical/qualcomm qca9880 firmware
- canonical/qualcomm qca9880
- canonical/qualcomm qca9886 firmware
- canonical/qualcomm qca9886
- canonical/qualcomm qca9980 firmware
- canonical/qualcomm qca9980
- canonical/qualcomm sdm630 firmware
- canonical/qualcomm sdm630
- canonical/qualcomm sdm636
- canonical/qualcomm sdm660 firmware
- canonical/qualcomm sdm660
- canonical/qualcomm sdx20
- canonical/qualcomm sdx24 firmware
- vendor/google