CVE-2019-10510

HIGH

Qualcomm Snapdragon Firmware DoS via Invalid Vendor Pass-Through Command

Title source: llm
STIX 2.1

Description

BT process died and BT toggled due to null pointer dereference when invalid vendor pass through command sent from remote in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Mobile, Snapdragon Voice & Music in QCS405, QCS605, SD 636, SD 675, SD 730, SD 820A, SD 835, SD 845 / SD 850, SD 855, SDM630, SDM660

References (1)

Core 1
Core References

Scores

CVSS v3 8.2
EPSS 0.0028
EPSS Percentile 51.4%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H

Details

CWE
CWE-476
Status published
Products (12)
qualcomm/qcs405_firmware
qualcomm/qcs605_firmware
qualcomm/sd_636_firmware
qualcomm/sd_675_firmware
qualcomm/sd_730_firmware
qualcomm/sd_820a_firmware
qualcomm/sd_835_firmware
qualcomm/sd_845_firmware
qualcomm/sd_850_firmware
qualcomm/sd_855_firmware
... and 2 more
Published Sep 30, 2019
Tracked Since Feb 18, 2026