9.1
CVSSv3

CVE-2019-10622

Published: 16/04/2020 Updated: 22/04/2020
CVSS v2 Base Score: 3.6 | Impact Score: 4.9 | Exploitability Score: 3.9
CVSS v3 Base Score: 9.1 | Impact Score: 5.2 | Exploitability Score: 3.9
VMScore: 320
Vector: AV:L/AC:L/Au:N/C:P/I:N/A:P

Vulnerability Summary

Out of bound memory access can happen while parsing ADSP message due to lack of check of size of payload received from userspace in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wired Infrastructure and Networking in APQ8009, APQ8096AU, IPQ4019, IPQ6018, IPQ8064, IPQ8074, MDM9206, MDM9207C, MDM9607, MDM9640, MDM9650, QCN7605, QCS605, SC8180X, SDM710, SDX24, SDX55, SM8150, SM8250, SXR2130

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

qualcomm apq8009_firmware -

qualcomm apq8096au_firmware -

qualcomm ipq4019_firmware -

qualcomm ipq6018_firmware -

qualcomm ipq8064_firmware -

qualcomm ipq8074_firmware -

qualcomm mdm9206_firmware -

qualcomm mdm9207c_firmware -

qualcomm mdm9607_firmware -

qualcomm mdm9640_firmware -

qualcomm mdm9650_firmware -

qualcomm qcn7605_firmware -

qualcomm qcs605_firmware -

qualcomm sc8180x_firmware -

qualcomm sdm710_firmware -

qualcomm sdx24_firmware -

qualcomm sdx55_firmware -

qualcomm sm8150_firmware -

qualcomm sm8250_firmware -

qualcomm sxr2130_firmware -