CVE-2019-10569

HIGH

Qualcomm Snapdragon Firmware - Out-of-bounds Write via Misplaced Instance ID in Hardware Accelerated Effects Definition

Title source: llm
STIX 2.1

Description

Stack buffer overflow due to instance id is misplaced inside definition of hardware accelerated effects in makefile in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Mobile in APQ8053, APQ8098, MDM9607, MDM9640, MSM8998, QCS605, SC8180X, SDM439, SDM630, SDM636, SDM660, SDM845, SDX24, SDX55, SM6150, SM7150, SM8150, SXR1130

References (1)

Core 1
Core References

Scores

CVSS v3 7.8
EPSS 0.0003
EPSS Percentile 10.6%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Details

CWE
CWE-787
Status published
Products (18)
qualcomm/apq8053_firmware
qualcomm/apq8098_firmware
qualcomm/mdm9607_firmware
qualcomm/mdm9640_firmware
qualcomm/msm8998_firmware
qualcomm/qcs605_firmware
qualcomm/sc8180x_firmware
qualcomm/sdm439_firmware
qualcomm/sdm630_firmware
qualcomm/sdm636_firmware
... and 8 more
Published Mar 05, 2020
Tracked Since Feb 18, 2026