CVE-2019-10526

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

Out of bound write in WLAN driver due to NULL character not properly placed after SSID name in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music in APQ8009, APQ8017, APQ8053, APQ8096AU, MDM9150, MDM9206, MDM9207C, MDM9607, MDM9640, MDM9650, MSM8917, MSM8920, MSM8937, MSM8940, MSM8953, MSM8996AU, QCA6174A, QCA6574AU, QCA9377, QCA9379, QCN7605, QCS405, QCS605, SC8180X, SDA845, SDM450, SDX20, SDX24, SDX55, SXR1130

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-787

Affected software

No affected versions have been published.

Timeline

Published
Mar 5, 2020
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2019

CVE-2019-105277.8u'SMEM partition can be manipulated in case of any compromise on HLOS, thus resulting in access to memory outside of SMEM address range whicCVE-2019-105289.8Use after free issue in kernel while accessing freed mdlog session info and its attributes after closing the session in Snapdragon Auto, SnaCVE-2019-105298.1Possible use after free issue due to race condition while attempting to mark the entry pages as dirty using function set_page_dirty() in SnaCVE-2019-10536.3An elevation of privilege vulnerability exists when the Windows Shell fails to validate folder shortcuts. An attacker who successfully exploCVE-2019-105307.8Lack of check of data truncation on user supplied data in kernel leads to buffer overflow in Snapdragon Auto, Snapdragon Consumer IOT, SnapdCVE-2019-105319.8Incorrect reading of system image resulting in buffer overflow when size of system image is increased in Snapdragon Auto, Snapdragon Mobile,CVE-2019-105329.8Null-pointer dereference issue can occur while calculating string length when source string length is zero in Snapdragon Auto, Snapdragon CoCVE-2019-105339.8Out of bound access due to improper validation of array index cause the index table entry to get corrupt in Snapdragon Auto, Snapdragon CompCVE-2019-105349.8Null-pointer dereference can occur while accessing the super index entry when it is not been allocated in Snapdragon Auto, Snapdragon ComputCVE-2019-105355.5Improper validation for loop variable received from firmware can lead to out of bound access in WLAN function while iterating through loop iCVE-2019-105367.8Potential double free scenario if driver receives another DIAG_EVENT_LOG_SUPPORTED event from firmware as the pointer is not set to NULL on CVE-2019-105377.8Improper validation of event buffer extracted from FW response can lead to integer overflow, which will allow to pass the length check and e