Not rated

CVE-2019-10516 Multiple read overflows in MM while decoding service accept,service reject,attach reject and MT detach in Snapdragon…

Description

Multiple read overflows in MM while decoding service accept,service reject,attach reject and MT detach in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in APQ8009, APQ8017, APQ8053, APQ8096, APQ8096AU, APQ8098, MDM9150, MDM9205, MDM9206, MDM9607, MDM9625, MDM9635M, MDM9640, MDM9645, MDM9650, MDM9655, MSM8905, MSM8909, MSM8909W, MSM8917, MSM8920, MSM8937, MSM8939, MSM8940, MSM8953, MSM8996AU, MSM8998, Nicobar, QCM2150, QCS605, QM215, SC8180X, SDA660, SDA845, SDM429, SDM439, SDM450, SDM630, SDM632, SDM636, SDM660, SDM670, SDM710, SDM845, SDM850, SDX20, SDX24, SDX55, SM6150, SM7150, SM8150, SXR1130

Affected products and versions

Product	Affected versions	Fixed in
Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables	Versions not published

References

www.qualcomm.com www.qualcomm.com

Timeline

Published December 18, 2019
Last modified August 4, 2024

The 50 CVEs of Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables →

CVE-2019-14073 Copying RTCP messages into the output buffer without checking the destination buffer size which could lead to a remote… Not rated CVE-2019-14062 Buffer overflows while decoding setup message from Network due to lack of check of IE message length received from… Not rated CVE-2020-3616 Buffer overflow in display function due to memory copy without checking length of size using strcpy function in… Not rated CVE-2019-14038 Buffer over-read in ADSP parse function due to lack of check for availability of sufficient data payload received in… Not rated

Track this CVE