CVE-2019-10622: Critical severity Qualcomm Apq8009 Firmware vulnerability
Out of bound memory access can happen while parsing ADSP message due to lack of check of size of payload received from userspace in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wired Infrastructure and Networking in APQ8009, APQ8096AU, IPQ4019, IPQ6018, IPQ8064, IPQ8074, MDM9206, MDM9207C, MDM9607, MDM9640, MDM9650, QCN7605, QCS605, SC8180X, SDM710, SDX24, SDX55, SM8150, SM8250, SXR2130
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2019-10622?
The severity of CVE-2019-10622 is critical, with a severity value of 9.1.
What software is affected by CVE-2019-10622?
The affected software includes Qualcomm Apq8009 Firmware, Qualcomm Ipq4019 Firmware, Qualcomm Ipq6018 Firmware, Qualcomm Ipq8064 Firmware, Qualcomm Ipq8074 Firmware, Qualcomm Mdm9206 Firmware, Qualcomm Mdm9207c Firmware, Qualcomm Mdm9607 Firmware, Qualcomm Mdm9640 Firmware, Qualcomm Mdm9650 Firmware, Qualcomm Qcn7605 Firmware, Qualcomm Qcs605 Firmware, Qualcomm Sc8180x Firmware, Qualcomm Sdm710 Firmware, Qualcomm Sdx24 Firmware, Qualcomm Sdx55 Firmware, Qualcomm Sm8150 Firmware, and Qualcomm Sm8250 Firmware.
How can out of bound memory access be exploited in CVE-2019-10622?
Out of bound memory access can occur while parsing ADSP messages due to a lack of check of the size of payload received from userspace.
What is the Common Weakness Enumeration (CWE) for CVE-2019-10622?
The Common Weakness Enumeration (CWE) for CVE-2019-10622 is CWE-125: Out-of-bounds Read.
Where can I find more information about CVE-2019-10622?
You can find more information about CVE-2019-10622 on the Qualcomm Product Security Bulletin for April 2020.