CVE-2019-10554

CriticalCVSS 9.1/10Last modified Jun 17, 2026

Description

Multiple Read overflows issue due to improper length check while decoding Identity Request in CSdomain/Authentication Reject in CS domain/ PRAU accept/while logging DL message in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking in APQ8009, APQ8017, APQ8053, APQ8096, APQ8096AU, APQ8098, MDM9150, MDM9205, MDM9206, MDM9607, MDM9615, MDM9625, MDM9635M, MDM9640, MDM9645, MDM9650, MDM9655, MSM8905, MSM8909, MSM8909W, MSM8917, MSM8920, MSM8937, MSM8939, MSM8940, MSM8953, MSM8996AU, MSM8998, Nicobar, QCM2150, QCS605, QM215, Rennell, SC8180X, SDA660, SDA845, SDM429, SDM429W, SDM439, SDM450, SDM630, SDM632, SDM636, SDM660, SDM670, SDM710, SDM845, SDM850, SDX20, SDX24, SDX55, SM6150, SM7150, SM8150, SXR1130

Metrics

CVSS 3.1 9.1/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H

Weakness enumeration

CWE-125

Affected software

No affected versions have been published.

Timeline

Published: Mar 5, 2020
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2019

CVE-2019-105557.8Buffer overflow can occur due to usage of wrong datatype and missing length check before copying into buffer in Snapdragon Auto, Snapdragon CVE-2019-105567.8Missing length check before copying the data from kernel space to userspace through the copy function can lead to buffer overflow in some ca CVE-2019-105579.8Out-of-bound read in the wireless driver in the Linux kernel due to lack of check of buffer length. in Snapdragon Auto, Snapdragon Consumer CVE-2019-105587.8While transferring data from APPS to DSP, Out of bound in FastRPC HLOS Driver due to the data buffer which can be controlled by DSP in Snapd CVE-2019-105599.8Accessing data buffer beyond the available data while parsing ogg clip can lead to null-pointer dereference and then memory corruption in Sn CVE-2019-10567.5A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka 'Scrip CVE-2019-105615.5Improper initialization of local variables which are parameters to sfs api may cause invalid pointer dereference and leads to denial of serv CVE-2019-105627.8u'Improper authentication and signature verification of debug polices in secure boot loader will allow unverified debug policies to be loade CVE-2019-105637.8Buffer over-read can occur in fast message handler due to improper input validation while processing a message from firmware in Snapdragon A CVE-2019-105647.8Possible OOB issue in EEPROM due to lack of check while accessing memory map array at the time of reading operation in Snapdragon Auto, Snap CVE-2019-105659.8Double free issue can happen when sensor power settings is freed by some thread while another thread try to access. in Snapdragon Auto, Snap CVE-2019-105667.8Buffer overflow can occur in wlan module if supported rates or extended rates element length is greater than max rate set length in Snapdrag