CVE-2019-10620: High severity qualcomm apq8096au firmware vulnerability

Published Apr 16, 2020

Updated

Kernel memory error in debug module due to improper check of user data length before copying into memory in Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile in APQ8096AU, APQ8098, MSM8996AU, QCN7605, SDM439, SDX24, SM8150

Affected Software

14 affected components

Qualcomm Apq8096au Firmware

Qualcomm APQ8096AU

Qualcomm Apq8098 Firmware

Qualcomm APQ8098

Qualcomm Msm8996au Firmware

Qualcomm MSM8996AU

Qualcomm Qcn7605 Firmware

Qualcomm Qcn7605

Qualcomm Sdm439 Firmware

Qualcomm SDM439

Qualcomm Sdx24 Firmware

Qualcomm SDX24

Qualcomm Sm8150 Firmware

Qualcomm SM8150

Remediation

Patch Available

https://www.qualcomm.com/company/product-security/bulletins/april-2020-bulletin

Event History

Apr 16, 2020

CVE Published

via MITRE·10:46 AM

Data Sourced

via MITRE·10:46 AM

DescriptionWeakness

Frequently Asked Questions

What is the severity of CVE-2019-10620?

CVE-2019-10620 has been rated as a high severity vulnerability due to its impact on kernel memory management.

How do I fix CVE-2019-10620?

To address CVE-2019-10620, users should update to the latest firmware version provided by Qualcomm for affected Snapdragon devices.

Which devices are affected by CVE-2019-10620?

CVE-2019-10620 affects several Qualcomm Snapdragon devices including APQ8096AU, APQ8098, and MSM8996AU among others.

What types of attacks can exploit CVE-2019-10620?

CVE-2019-10620 can potentially be exploited to allow unauthorized access to memory or execution of arbitrary code.

Is CVE-2019-10620 publicly known?

Yes, CVE-2019-10620 is a publicly documented vulnerability and has been publicly disclosed.