CVE-2019-10616: Null Pointer Dereference
First published: Mon Mar 02 2020(Updated: )
Possibility of null pointer access if the SPDM commands are executed in the non-standard way in TZ. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking in APQ8009, APQ8016, MDM9150, MDM9206, MDM9607, MDM9650, MSM8905, MSM8909, MSM8909W, MSM8998, SA6155P, SDX24
Credit: product-security@qualcomm.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Google Android | ||
| Google Android | ||
| Qualcomm Apq8009 | ||
| Qualcomm Apq8016 Firmware | ||
| Google Android | ||
| Google Android | ||
| Google Android | ||
| Google Android | ||
| Qualcomm Mdm9607 | ||
| Qualcomm Mdm9650 Firmware | ||
| Qualcomm Mdm9650 | ||
| Qualcomm Msm8905 Firmware | ||
| Qualcomm Msm8905 | ||
| Google Android | ||
| Qualcomm Msm8909 | ||
| Qualcomm Msm8909w Firmware | ||
| Qualcomm Msm8909w | ||
| Google Android | ||
| Qualcomm MSM8998 | ||
| Google Android | ||
| Qualcomm Sa6155p | ||
| Qualcomm Sdx24 Firmware | ||
| Google Android | ||
| Qualcomm Mdm9206 Firmware | ||
| Qualcomm Mdm9206 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is CVE-2019-10616?
CVE-2019-10616 is a vulnerability that allows null pointer access if the SPDM commands are executed in a non-standard way in certain Qualcomm products running Google Android.
Which products are affected by CVE-2019-10616?
CVE-2019-10616 affects Google Android on Qualcomm products such as Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile.
How severe is CVE-2019-10616?
CVE-2019-10616 has a severity rating of 5.5 (high).
How can I mitigate the CVE-2019-10616 vulnerability?
To mitigate the CVE-2019-10616 vulnerability, it is recommended to apply the security updates provided by Google and Qualcomm.
Where can I find more information about CVE-2019-10616?
More information about CVE-2019-10616 can be found in the Android Security Bulletin for March 2020 and the Qualcomm Product Security Bulletins.
- agent/last-modified-date
- agent/first-publish-date
- collector/android-source
- agent/software-canonical-lookup-request
- agent/type
- collector/nvd-index
- agent/references
- agent/author
- agent/severity
- agent/weakness
- agent/softwarecombine
- agent/tags
- agent/description
- agent/event
- vendor/google
- canonical/google android
- vendor/qualcomm
- canonical/qualcomm apq8009
- canonical/qualcomm apq8016 firmware
- canonical/qualcomm mdm9607
- canonical/qualcomm mdm9650 firmware
- canonical/qualcomm mdm9650
- canonical/qualcomm msm8905 firmware
- canonical/qualcomm msm8905
- canonical/qualcomm msm8909
- canonical/qualcomm msm8909w firmware
- canonical/qualcomm msm8909w
- canonical/qualcomm msm8998
- canonical/qualcomm sa6155p
- canonical/qualcomm sdx24 firmware
- canonical/qualcomm mdm9206 firmware
- canonical/qualcomm mdm9206