CVE-2019-10604

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

Possibility of heap-buffer-overflow during last iteration of loop while populating image version information in diag command response packet, in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables in APQ8053, APQ8096AU, APQ8098, MDM9607, MDM9640, MSM8909W, MSM8917, MSM8953, Nicobar, QCS605, QM215, Rennell, SA6155P, Saipan, SDA660, SDM429, SDM439, SDM450, SDM632, SDM670, SDM710, SDM845, SM6150, SM7150, SM8150, SM8250, SXR1130, SXR2130

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-787

Affected software

No affected versions have been published.

Timeline

Published: Mar 5, 2020
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2019

CVE-2019-106057.8Buffer overwrite can occur in IEEE80211 header filling function due to lack of range check of array index received from firmware in Snapdrag CVE-2019-106067.8Out-of-bound access will occur in USB driver due to lack of check to validate the frame size passed by user in Snapdragon Auto, Snapdragon C CVE-2019-106077.8Out of bounds memcpy can occur by providing the embedded NULL character string and length greater than the actual string length in Snapdrago CVE-2019-106085.5Information disclosure issue occurs as there is no binding between the secure keypad session and the secure display session that allows user CVE-2019-106099.8Out of bound write can happen due to lack of check of array index value while calculating it. in Snapdragon Auto, Snapdragon Compute, Snapdr CVE-2019-106109.1Possible buffer over read when trying to process SDP message Video media line with frame-size attribute in video Media line in Snapdragon Au CVE-2019-106119.8Buffer overflow can occur while processing clip due to lack of check of object size before parsing in Snapdragon Auto, Snapdragon Compute, S CVE-2019-106129.8UTCB object has a function pointer called by the reaper to deallocate its memory resources and this address can potentially be corrupted by CVE-2019-106149.8Out of boundary access is possible as there is no validation of data accessed against the received size of the packet in case of malicious f CVE-2019-106157.8u'Possibility of integer overflow in keymaster 4 while allocating memory due to multiplication of large numcerts value and size of keymaster CVE-2019-106165.5Possibility of null pointer access if the SPDM commands are executed in the non-standard way in TZ. in Snapdragon Auto, Snapdragon Compute, CVE-2019-106177.8Low privilege users can access service configuration which contains registry data that admins uses to create or delete entries in the regist