CVE-2019-10611

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

Buffer overflow can occur while processing clip due to lack of check of object size before parsing in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in APQ8009, APQ8017, APQ8053, APQ8064, APQ8096AU, APQ8098, MDM9206, MDM9207C, MDM9607, MSM8905, MSM8909, MSM8909W, MSM8917, MSM8920, MSM8937, MSM8939, MSM8940, MSM8953, MSM8996, Nicobar, QCS605, QM215, SA6155P, SDA660, SDA845, SDM429, SDM429W, SDM439, SDM450, SDM632, SDM660, SDM670, SDM710, SDM845, SDX20, SM6150, SM8150, SM8250, SXR1130, SXR2130

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-129

Affected software

No affected versions have been published.

Timeline

Published: Jan 21, 2020
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2019

CVE-2019-106129.8UTCB object has a function pointer called by the reaper to deallocate its memory resources and this address can potentially be corrupted by CVE-2019-106149.8Out of boundary access is possible as there is no validation of data accessed against the received size of the packet in case of malicious f CVE-2019-106157.8u'Possibility of integer overflow in keymaster 4 while allocating memory due to multiplication of large numcerts value and size of keymaster CVE-2019-106165.5Possibility of null pointer access if the SPDM commands are executed in the non-standard way in TZ. in Snapdragon Auto, Snapdragon Compute, CVE-2019-106177.8Low privilege users can access service configuration which contains registry data that admins uses to create or delete entries in the regist CVE-2019-106185.5Driver may access an invalid address while processing IO control due to lack of check of address validation in Snapdragon Connectivity in QC CVE-2019-10627.5A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'C CVE-2019-106207.8Kernel memory error in debug module due to improper check of user data length before copying into memory in Snapdragon Auto, Snapdragon Cons CVE-2019-106217.8Use after free issue when MAP and UNMAP calls at same time as data structure used my MAP may be freed by UNMAP function in Snapdragon Auto, CVE-2019-106229.1Out of bound memory access can happen while parsing ADSP message due to lack of check of size of payload received from userspace in Snapdrag CVE-2019-106237.1Possible integer overflow can happen in host driver while processing user controlled string due to improper validation on data received. in CVE-2019-106247.8While handling the vendor command there is an integer truncation issue that could yield a buffer overflow due to int data type copied to u8