Not rated

CVE-2019-10591 Null pointer dereference can happen when parsing udta atom which is non-standard and having invalid depth in…

Description

Null pointer dereference can happen when parsing udta atom which is non-standard and having invalid depth in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in APQ8009, APQ8017, APQ8053, APQ8096AU, APQ8098, MDM9206, MDM9207C, MDM9607, MSM8905, MSM8909W, MSM8917, MSM8939, MSM8953, MSM8996, MSM8996AU, MSM8998, Nicobar, QCS405, QCS605, QM215, Rennell, SA6155P, Saipan, SDA660, SDA845, SDM429, SDM429W, SDM439, SDM450, SDM630, SDM632, SDM636, SDM660, SDM670, SDM710, SDM845, SDX20, SM6150, SM7150, SM8150, SM8250, SXR1130, SXR2130

Affected products and versions

Product	Affected versions	Fixed in
Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables	Versions not published

References

www.qualcomm.com www.qualcomm.com

Timeline

Published March 5, 2020
Last modified August 4, 2024

The 41 CVEs of Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables →

CVE-2022-25695 Memory corruption in MODEM due to Improper Validation of Array Index while processing GSTK Proactive commands in… 8.4 High CVE-2021-30284 Possible information exposure and denial of service due to NAS not dropping messages when integrity check fails in… 7.5 High CVE-2021-30255 Possible buffer overflow due to improper input validation in PDM DIAG command in FTM in Snapdragon Auto, Snapdragon… 7.8 High CVE-2021-30254 Possible buffer overflow due to improper input validation in factory calibration and test DIAG command in Snapdragon… 7.8 High

Track this CVE