CVE-2019-10608
First published: Mon Apr 06 2020(Updated: )
Information disclosure issue occurs as there is no binding between the secure keypad session and the secure display session that allows user to take control of the REE to stop the secure keypad session and read the keypad input. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking in APQ8009, MSM8905, MSM8909
Credit: product-security@qualcomm.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Android | ||
| Qualcomm APQ8009W Firmware | ||
| Qualcomm APQ8009W | ||
| Qualcomm 8905 Firmware | ||
| Qualcomm 8905 | ||
| Qualcomm MSM8909W | ||
| Qualcomm MSM8909W |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2019-10608?
The severity of CVE-2019-10608 is high due to the potential for information disclosure.
How do I fix CVE-2019-10608?
To fix CVE-2019-10608, update your device firmware to the latest version provided by Qualcomm or the device manufacturer.
Which devices are affected by CVE-2019-10608?
CVE-2019-10608 affects devices using Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, and certain firmware versions.
What type of vulnerability is CVE-2019-10608?
CVE-2019-10608 is an information disclosure vulnerability that allows unauthorized access to keypad input.
Can CVE-2019-10608 be exploited remotely?
CVE-2019-10608 typically requires local access to exploit, thus reducing the risk of remote exploitation.
- agent/type
- agent/author
- agent/severity
- agent/references
- agent/first-publish-date
- agent/description
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/event
- agent/source
- collector/android-source
- source/Android
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- agent/softwarecombine
- agent/tags
- collector/nvd-index
- vendor/google
- canonical/android
- vendor/qualcomm
- canonical/qualcomm apq8009w firmware
- canonical/qualcomm apq8009w
- canonical/qualcomm 8905 firmware
- canonical/qualcomm 8905
- canonical/qualcomm msm8909w