CVE-2019-10597

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

kernel writes to user passed address without any checks can lead to arbitrary memory write in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Mobile, Snapdragon Wired Infrastructure and Networking in IPQ6018, IPQ8074, MSM8996, MSM8996AU, Nicobar, QCS605, Rennell, Saipan, SC7180, SC8180X, SDM670, SDM710, SDM845, SDM850, SM6150, SM7150, SM8150, SM8250, SXR1130, SXR2130

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-787

Affected software

No affected versions have been published.

Timeline

Published
Jun 22, 2020
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2019

CVE-2019-105987.8Out of bound access can occur while processing peer info in IBSS connection mode due to lack of upper bounds check to ensure that for loop fCVE-2019-10608.8A remote code execution vulnerability exists when the Microsoft XML Core Services MSXML parser processes user input, aka 'MS XML Remote CodeCVE-2019-106007.8Use of local variable as argument to netlink CB callback goes out of it scope when callback triggered lead to invalid stack memory in SnapdrCVE-2019-106017.8Out of bound access can occur while processing firmware event due to lack of validation of WMI message received from firmware in Snapdragon CVE-2019-106027.8Potential use-after-free heap error during Validate/Present calls on display HW composer in Snapdragon Auto, Snapdragon Compute, Snapdragon CVE-2019-106037.8Use after free issue occurs If the real device interface goes down and a route lookup is performed while sending a raw IPv6 message in SnapdCVE-2019-106047.8Possibility of heap-buffer-overflow during last iteration of loop while populating image version information in diag command response packetCVE-2019-106057.8Buffer overwrite can occur in IEEE80211 header filling function due to lack of range check of array index received from firmware in SnapdragCVE-2019-106067.8Out-of-bound access will occur in USB driver due to lack of check to validate the frame size passed by user in Snapdragon Auto, Snapdragon CCVE-2019-106077.8Out of bounds memcpy can occur by providing the embedded NULL character string and length greater than the actual string length in SnapdragoCVE-2019-106085.5Information disclosure issue occurs as there is no binding between the secure keypad session and the secure display session that allows userCVE-2019-106099.8Out of bound write can happen due to lack of check of array index value while calculating it. in Snapdragon Auto, Snapdragon Compute, Snapdr