critical
9.1
CWE
125
Advisory Published
Updated

CVE-2019-10622

First published: Thu Apr 16 2020(Updated: )

Out of bound memory access can happen while parsing ADSP message due to lack of check of size of payload received from userspace in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wired Infrastructure and Networking in APQ8009, APQ8096AU, IPQ4019, IPQ6018, IPQ8064, IPQ8074, MDM9206, MDM9207C, MDM9607, MDM9640, MDM9650, QCN7605, QCS605, SC8180X, SDM710, SDX24, SDX55, SM8150, SM8250, SXR2130

Credit: product-security@qualcomm.com

Affected SoftwareAffected VersionHow to fix
Google Android
Qualcomm Apq8009
Google Android
Google Android
Qualcomm Ipq4019 Firmware
Qualcomm Ipq4019
Google Android
Qualcomm Ipq6018
Qualcomm Ipq8064 Firmware
Qualcomm Ipq8064
Qualcomm Ipq8074 Firmware
Qualcomm Ipq8074
Qualcomm Mdm9206 Firmware
Qualcomm Mdm9206
Google Android
Google Android
Google Android
Qualcomm Mdm9607
Qualcomm Mdm9640 Firmware
Qualcomm Mdm9640
Qualcomm Mdm9650 Firmware
Qualcomm Mdm9650
Google Android
Google Android
Qualcomm Qcs605 Firmware
Google Android
Qualcomm Sc8180x Firmware
Qualcomm Sc8180x
Qualcomm Sdm710 Firmware
Qualcomm Sdm710
Qualcomm Sdx24 Firmware
Google Android
Qualcomm Sdx55 Firmware
Qualcomm Sdx55
Qualcomm Sm8150 Firmware
Qualcomm Sm8150
Qualcomm Sm8250 Firmware
Qualcomm SM8250
Qualcomm Sxr2130 Firmware
Qualcomm Sxr2130

Remedy

https://www.qualcomm.com/company/product-security/bulletins/april-2020-bulletin

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Read MoreStart Free Trial

Reference Links

Frequently Asked Questions

  • What is the severity of CVE-2019-10622?

    The severity of CVE-2019-10622 is critical, with a severity value of 9.1.

  • What software is affected by CVE-2019-10622?

    The affected software includes Qualcomm Apq8009 Firmware, Qualcomm Ipq4019 Firmware, Qualcomm Ipq6018 Firmware, Qualcomm Ipq8064 Firmware, Qualcomm Ipq8074 Firmware, Qualcomm Mdm9206 Firmware, Qualcomm Mdm9207c Firmware, Qualcomm Mdm9607 Firmware, Qualcomm Mdm9640 Firmware, Qualcomm Mdm9650 Firmware, Qualcomm Qcn7605 Firmware, Qualcomm Qcs605 Firmware, Qualcomm Sc8180x Firmware, Qualcomm Sdm710 Firmware, Qualcomm Sdx24 Firmware, Qualcomm Sdx55 Firmware, Qualcomm Sm8150 Firmware, and Qualcomm Sm8250 Firmware.

  • How can out of bound memory access be exploited in CVE-2019-10622?

    Out of bound memory access can occur while parsing ADSP messages due to a lack of check of the size of payload received from userspace.

  • What is the Common Weakness Enumeration (CWE) for CVE-2019-10622?

    The Common Weakness Enumeration (CWE) for CVE-2019-10622 is CWE-125: Out-of-bounds Read.

  • Where can I find more information about CVE-2019-10622?

    You can find more information about CVE-2019-10622 on the Qualcomm Product Security Bulletin for April 2020.

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2024 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203