Published: 30/09/2019 Updated: 02/10/2019

CVSS v2 Base Score: 8.5 | Impact Score: 7.8 | Exploitability Score: 10

CVSS v3 Base Score: 8.2 | Impact Score: 4.2 | Exploitability Score: 3.9

VMScore: 756

Vector: AV:N/AC:L/Au:N/C:N/I:P/A:C

BT process died and BT toggled due to null pointer dereference when invalid vendor pass through command sent from remote in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Mobile, Snapdragon Voice & Music in QCS405, QCS605, SD 636, SD 675, SD 730, SD 820A, SD 835, SD 845 / SD 850, SD 855, SDM630, SDM660

Vulnerable Product	Search on Vulmon	Subscribe to Product
qualcomm qcs405_firmware -
qualcomm qcs605_firmware -
qualcomm sd_636_firmware -
qualcomm sd_675_firmware -
qualcomm sd_730_firmware -
qualcomm sd_820a_firmware -
qualcomm sd_835_firmware -
qualcomm sd_845_firmware -
qualcomm sd_850_firmware -
qualcomm sd_855_firmware -
qualcomm sdm630_firmware -
qualcomm sdm660_firmware -

It's 2019 – and you can completely pwn millions of Qualcomm-powered Androids over the air

The Register • Shaun Nichols in San Francisco • 06 Aug 2019

Grab security patches now from chip designer, Google Exposed: Lazy Android mobe makers couldn't care less about security

Black Hat It is possible to thoroughly hijack a nearby vulnerable Qualcomm-based Android phone, tablet, or similar gadget, via Wi-Fi, we learned on Monday. This likely affects millions of Android devices. Specifically, the following two security holes, dubbed Qualpwn and found by Tencent's Blade Team, can be leveraged one after the other to potentially take over a handheld: Thus, it is possible for a miscreant to join a nearby wireless network, seek out a vulnerable Qualcomm-powered Android devi...

The Register • Shaun Nichols in San Francisco • 06 Aug 2019

Grab security patches now from chip designer, Google Exposed: Lazy Android mobe makers couldn't care less about security

Black Hat It is possible to thoroughly hijack a nearby vulnerable Qualcomm-based Android phone, tablet, or similar gadget, via Wi-Fi, we learned on Monday. This likely affects millions of Android devices. Specifically, the following two security holes, dubbed Qualpwn and found by Tencent's Blade Team, can be leveraged one after the other to potentially take over a handheld: Thus, it is possible for a miscreant to join a nearby wireless network, seek out a vulnerable Qualcomm-powered Android devi...

CVE-2019-10510

Vulnerability Summary

Vulnerability Trend

Recent Articles

References

Vulmon Search

About

Products

Connect