CVE-2019-10499
HIGHQualcomm IPQ4019/IPQ8064/IPQ8074/QCS405/SD 665/SD 675/SD 730/SD 855 Firmware - Out-of-Bounds Access
Title source: llmDescription
Improper validation of read and write index of tx and rx fifo`s before using for data copy from fifo can lead to out-of-bound access. in Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking in IPQ4019, IPQ8064, IPQ8074, QCS405, SD 665, SD 675, SD 730, SD 855
References (1)
Core 1
Core References
Patch, Third Party Advisory x_refsource_confirm
https://www.codeaurora.org/security-bulletin/2019/08/05/august-2019-code-aurora-security-bulletin
Scores
CVSS v3
7.8
EPSS
0.0003
EPSS Percentile
10.7%
Attack Vector
LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Details
CWE
CWE-129
Status
published
Products (8)
qualcomm/ipq4019_firmware
qualcomm/ipq8064_firmware
qualcomm/ipq8074_firmware
qualcomm/qcs405_firmware
qualcomm/sd_665_firmware
qualcomm/sd_675_firmware
qualcomm/sd_730_firmware
qualcomm/sd_855_firmware
Published
Sep 30, 2019
Tracked Since
Feb 18, 2026