CVE-2019-10617

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

Low privilege users can access service configuration which contains registry data that admins uses to create or delete entries in the registry in QCA6174_9377.WIN.1.0 in QCA6174_9377

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected software

No affected versions have been published.

Timeline

Published: Nov 21, 2019
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2019

CVE-2019-106185.5Driver may access an invalid address while processing IO control due to lack of check of address validation in Snapdragon Connectivity in QC CVE-2019-10627.5A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'C CVE-2019-106207.8Kernel memory error in debug module due to improper check of user data length before copying into memory in Snapdragon Auto, Snapdragon Cons CVE-2019-106217.8Use after free issue when MAP and UNMAP calls at same time as data structure used my MAP may be freed by UNMAP function in Snapdragon Auto, CVE-2019-106229.1Out of bound memory access can happen while parsing ADSP message due to lack of check of size of payload received from userspace in Snapdrag CVE-2019-106237.1Possible integer overflow can happen in host driver while processing user controlled string due to improper validation on data received. in CVE-2019-106247.8While handling the vendor command there is an integer truncation issue that could yield a buffer overflow due to int data type copied to u8 CVE-2019-106257.1Out of bound access in diag services when DCI command buffer reallocation is not done properly with required capacity in Snapdragon Auto, Sn CVE-2019-106265.5Payload size is not validated before reading memory that may cause issue of accessing invalid pointer or some garbage data in Snapdragon Aut CVE-2019-106279.8Integer overflow to buffer overflow vulnerability in PostScript image handling code used by the PostScript- and PDF-compatible interpreters CVE-2019-106287.8u'Memory can be potentially corrupted if random index is allowed to manipulate TLB entries in Kernel from user library' in Snapdragon Auto, CVE-2019-106297.8u'User Process can potentially corrupt kernel virtual page by passing a crafted page in API' in Snapdragon Auto, Snapdragon Compute, Snapdra