CVE-2019-10615

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

u'Possibility of integer overflow in keymaster 4 while allocating memory due to multiplication of large numcerts value and size of keymaster bob which can lead to memory corruption' in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking in APQ8009, APQ8017, APQ8053, APQ8096AU, APQ8098, Kamorta, MDM9150, MDM9205, MDM9206, MDM9607, MDM9650, MSM8905, MSM8909, MSM8909W, MSM8917, MSM8920, MSM8937, MSM8940, MSM8953, MSM8996, MSM8996AU, MSM8998, Nicobar, QCM2150, QCS404, QCS405, QCS605, QCS610, QM215, Rennell, SA415M, SA515M, SA6155P, SC7180, SC8180X, SDA660, SDA845, SDM429, SDM429W, SDM439, SDM450, SDM630, SDM632, SDM636, SDM660, SDM670, SDM710, SDM845, SDM850, SDX24, SDX55, SM6150, SM7150, SM8150, SM8250, SXR1130, SXR2130

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-190CWE-787

Affected software

No affected versions have been published.

Timeline

Published
Sep 8, 2020
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2019

CVE-2019-106165.5Possibility of null pointer access if the SPDM commands are executed in the non-standard way in TZ. in Snapdragon Auto, Snapdragon Compute, CVE-2019-106177.8Low privilege users can access service configuration which contains registry data that admins uses to create or delete entries in the registCVE-2019-106185.5Driver may access an invalid address while processing IO control due to lack of check of address validation in Snapdragon Connectivity in QCCVE-2019-10627.5A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'CCVE-2019-106207.8Kernel memory error in debug module due to improper check of user data length before copying into memory in Snapdragon Auto, Snapdragon ConsCVE-2019-106217.8Use after free issue when MAP and UNMAP calls at same time as data structure used my MAP may be freed by UNMAP function in Snapdragon Auto, CVE-2019-106229.1Out of bound memory access can happen while parsing ADSP message due to lack of check of size of payload received from userspace in SnapdragCVE-2019-106237.1Possible integer overflow can happen in host driver while processing user controlled string due to improper validation on data received. in CVE-2019-106247.8While handling the vendor command there is an integer truncation issue that could yield a buffer overflow due to int data type copied to u8 CVE-2019-106257.1Out of bound access in diag services when DCI command buffer reallocation is not done properly with required capacity in Snapdragon Auto, SnCVE-2019-106265.5Payload size is not validated before reading memory that may cause issue of accessing invalid pointer or some garbage data in Snapdragon AutCVE-2019-106279.8Integer overflow to buffer overflow vulnerability in PostScript image handling code used by the PostScript- and PDF-compatible interpreters