CVE-2019-10614

CVE-2019-10614: falha em Qualcomm, Inc. Snapdragon Auto, Snapdragon…

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar Snapdragon Mobile+ Monitorar Snapdragon Industrial IOT

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

3Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackepss 0.9%
Out of boundary access is possible as there is no validation of data accessed against the received size of the packet in case of malicious firmware in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in APQ8009, APQ8017, APQ8053, APQ8096AU, APQ8098, MDM9206, MDM9207C, MDM9607, MDM9640, MDM9650, MSM8909W, MSM8917, MSM8920, MSM8937, MSM8940, MSM8953, MSM8996AU, MSM8998, Nicobar, QCN7605, QCS405, QCS605, QM215, SA6155P, SDA660, SDA845, SDM429, SDM439, SDM450, SDM630, SDM632, SDM636, SDM660, SDM670, SDM710, SDM845, SDX20, SDX24, SDX55, SM6150, SM7150, SM8150, SM8250, SXR1130, SXR2130
Produtos afetados
Qualcomm, Inc. · Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables
CVEs relacionadas — Qualcomm, Inc. Snapdragon Auto, Snapdragon…

No mesmo produto, das mais perigosas para as menos.

CVE-2020-11272—CVE-2020-11272EPSS 0.9%CVE-2022-22065HIGHCVE-2022-22065EPSS 0.7%CVE-2022-25670HIGHCVE-2022-25670EPSS 0.6%CVE-2022-22064HIGHCVE-2022-22064EPSS 0.6%CVE-2021-35083HIGHCVE-2021-35083EPSS 0.5%CVE-2022-25720CRITICALCVE-2022-25720EPSS 0.5%