CVE-2019-10605
First published: Mon Dec 02 2019(Updated: )
Buffer overwrite can occur in IEEE80211 header filling function due to lack of range check of array index received from firmware in Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking in APQ8009, APQ8053, IPQ8074, MDM9607, MDM9650, MSM8909, MSM8939, QCN7605, SDA660, SDM630, SDM636, SDM660, SDX20, SDX24
Credit: product-security@qualcomm.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Google Android | ||
| Qualcomm apq8009 firmware | ||
| Qualcomm apq8009 | ||
| Qualcomm APQ8053 Firmware | ||
| Qualcomm APQ8053 Firmware | ||
| qualcomm ipq8074 firmware | ||
| qualcomm IPQ8074 | ||
| Qualcomm MDM9607 firmware | ||
| Qualcomm MDM9607 | ||
| Qualcomm MDM9650 firmware | ||
| Qualcomm MDM9650 | ||
| Qualcomm MSM8909W | ||
| Qualcomm MSM8909W | ||
| qualcomm MSM8939 firmware | ||
| qualcomm MSM8939 | ||
| qualcomm qcn7605 Firmware | ||
| qualcomm qcn7605 | ||
| qualcomm SDA660 firmware | ||
| qualcomm SDA660 | ||
| qualcomm SDM630 firmware | ||
| qualcomm SDM630 | ||
| qualcomm SDM636 firmware | ||
| qualcomm SDM636 | ||
| qualcomm SDM660 firmware | ||
| qualcomm SDM660 | ||
| Qualcomm SDX20 Firmware | ||
| Qualcomm SDX20 Firmware | ||
| Qualcomm sdx24 firmware | ||
| Qualcomm sdx24 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is CVE-2019-10605?
CVE-2019-10605 refers to a vulnerability where a buffer overwrite can occur in the IEEE80211 header filling function due to a lack of range check of array index.
Which software is affected by CVE-2019-10605?
The affected software includes Google Android, Qualcomm Apq8009 Firmware, Qualcomm Ipq8074 Firmware, Qualcomm Mdm9607 Firmware, Qualcomm Mdm9650 Firmware, Qualcomm Msm8909 Firmware, Qualcomm Sdm630 Firmware, Qualcomm Sdm636 Firmware, Qualcomm Sdm660 Firmware, Qualcomm Sdx20 Firmware, and Qualcomm Sdx24 Firmware.
What is the severity of CVE-2019-10605?
The severity of CVE-2019-10605 is classified as high with a severity score of 7.8.
How can I fix CVE-2019-10605?
To fix CVE-2019-10605, it is recommended to apply the patches provided by Qualcomm and Google.
Where can I find more information about CVE-2019-10605?
You can find more information about CVE-2019-10605 on the Qualcomm Product Security Bulletin and the Android Security Bulletin for December 2019.
- agent/type
- agent/first-publish-date
- agent/author
- agent/severity
- agent/weakness
- agent/remedy
- agent/references
- agent/description
- collector/android-source
- source/Android
- agent/software-canonical-lookup
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/event
- agent/source
- agent/softwarecombine
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/google
- canonical/google android
- vendor/qualcomm
- canonical/qualcomm apq8009 firmware
- canonical/qualcomm apq8009
- canonical/qualcomm apq8053 firmware
- canonical/qualcomm ipq8074 firmware
- canonical/qualcomm ipq8074
- canonical/qualcomm mdm9607 firmware
- canonical/qualcomm mdm9607
- canonical/qualcomm mdm9650 firmware
- canonical/qualcomm mdm9650
- canonical/qualcomm msm8909w
- canonical/qualcomm msm8939 firmware
- canonical/qualcomm msm8939
- canonical/qualcomm qcn7605 firmware
- canonical/qualcomm qcn7605
- canonical/qualcomm sda660 firmware
- canonical/qualcomm sda660
- canonical/qualcomm sdm630 firmware
- canonical/qualcomm sdm630
- canonical/qualcomm sdm636 firmware
- canonical/qualcomm sdm636
- canonical/qualcomm sdm660 firmware
- canonical/qualcomm sdm660
- canonical/qualcomm sdx20 firmware
- canonical/qualcomm sdx24 firmware
- canonical/qualcomm sdx24