CVE-2019-10534

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

Null-pointer dereference can occur while accessing the super index entry when it is not been allocated in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in MDM9206, MDM9607, MSM8909W, MSM8996AU, QCA6574AU, QCS405, QCS605, Qualcomm 215, SD 210/SD 212/SD 205, SD 425, SD 427, SD 430, SD 435, SD 439 / SD 429, SD 450, SD 600, SD 625, SD 632, SD 636, SD 665, SD 675, SD 712 / SD 710 / SD 670, SD 730, SD 820, SD 820A, SD 835, SD 845 / SD 850, SD 855, SDA660, SDM439, SDM630, SDM660, SDX20

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-476

Affected software

No affected versions have been published.

Timeline

Published
Nov 6, 2019
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2019

CVE-2019-105355.5Improper validation for loop variable received from firmware can lead to out of bound access in WLAN function while iterating through loop iCVE-2019-105367.8Potential double free scenario if driver receives another DIAG_EVENT_LOG_SUPPORTED event from firmware as the pointer is not set to NULL on CVE-2019-105377.8Improper validation of event buffer extracted from FW response can lead to integer overflow, which will allow to pass the length check and eCVE-2019-105389.8Lack of check of address range received from firmware response allows modem to respond arbitrary pages into its address range which can compCVE-2019-105399.8Possible buffer overflow issue due to lack of length check when parsing the extended cap IE header length in Snapdragon Auto, Snapdragon ComCVE-2019-10545.0A security feature bypass vulnerability exists in Edge that allows for bypassing Mark of the Web Tagging (MOTW). Failing to set the MOTW meaCVE-2019-105409.8Buffer overflow in WLAN NAN function due to lack of check of count value received in NAN availability attribute in Snapdragon Auto, SnapdragCVE-2019-105419.8Dereference on uninitialized buffer can happen when parsing FLV clip with corrupted codec specific data in Snapdragon Auto, Snapdragon CompuCVE-2019-105429.8Buffer over-read may occur when downloading a corrupted firmware file that has chunk length in header which doesn`t match the contents in SnCVE-2019-105447.8Improper length check on source buffer to handle userspace data received can lead to out-of-bound access in diag handlers in Snapdragon AutoCVE-2019-105455.5Null pointer dereference issue in kernel due to missing check related to LLC support in GPU in Snapdragon Auto, Snapdragon Consumer ElectronCVE-2019-105469.8Buffer overflow can occur in WLAN firmware while parsing beacon/probe_response frames during roaming in Snapdragon Auto, Snapdragon Compute,