CVE-2019-10605: High severity Google Android vulnerability
Buffer overwrite can occur in IEEE80211 header filling function due to lack of range check of array index received from firmware in Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking in APQ8009, APQ8053, IPQ8074, MDM9607, MDM9650, MSM8909, MSM8939, QCN7605, SDA660, SDM630, SDM636, SDM660, SDX20, SDX24
Affected Software
Remediation
Event History
Frequently Asked Questions
What is CVE-2019-10605?
CVE-2019-10605 refers to a vulnerability where a buffer overwrite can occur in the IEEE80211 header filling function due to a lack of range check of array index.
Which software is affected by CVE-2019-10605?
The affected software includes Google Android, Qualcomm Apq8009 Firmware, Qualcomm Ipq8074 Firmware, Qualcomm Mdm9607 Firmware, Qualcomm Mdm9650 Firmware, Qualcomm Msm8909 Firmware, Qualcomm Sdm630 Firmware, Qualcomm Sdm636 Firmware, Qualcomm Sdm660 Firmware, Qualcomm Sdx20 Firmware, and Qualcomm Sdx24 Firmware.
What is the severity of CVE-2019-10605?
The severity of CVE-2019-10605 is classified as high with a severity score of 7.8.
How can I fix CVE-2019-10605?
To fix CVE-2019-10605, it is recommended to apply the patches provided by Qualcomm and Google.
Where can I find more information about CVE-2019-10605?
You can find more information about CVE-2019-10605 on the Qualcomm Product Security Bulletin and the Android Security Bulletin for December 2019.