CVE-2019-10598

Out of bound access can occur while processing peer info in IBSS connection mode due to lack of upper bounds check to ensure that for loop further will not cause an overflow in Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music in APQ8053, APQ8096AU, MDM9607, MSM8996AU, QCA6574AU, QCN7605, QCS605, SDA660, SDA845, SDM630, SDM636, SDM660, SDM845, SDX20, SDX24, SDX55, SM6150, SM7150, SM8150, SXR1130
Classic Buffer Overflow
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
7.8 HIGH
LOCAL
LOW
LOW
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
qualcommCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 27%
VendorProductVersion
qualcommapq8053_firmware
-
qualcommapq8096au_firmware
-
qualcommmdm9607_firmware
-
qualcommmsm8996au_firmware
-
qualcommqca6574au_firmware
-
qualcommqcn7605_firmware
-
qualcommqcs605_firmware
-
qualcommsda660_firmware
-
qualcommsda845_firmware
-
qualcommsdm630_firmware
-
qualcommsdm636_firmware
-
qualcommsdm660_firmware
-
qualcommsdm845_firmware
-
qualcommsdx20_firmware
-
qualcommsdx24_firmware
-
qualcommsdx55_firmware
-
qualcommsm6150_firmware
-
qualcommsm7150_firmware
-
qualcommsm8150_firmware
-
qualcommsxr1130_firmware
-
𝑥
= Vulnerable software versions