CVSS 3.1
7.8 highCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HCVE-2019-10556
High (7.8) in qualcomm. EPSS 0.2% chance of exploitation in the next 30 days.
Missing length check before copying the data from kernel space to userspace through the copy function can lead to buffer overflow in some cases in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in APQ8009, APQ8053, APQ8096AU, MSM8909W, MSM8917, MSM8953, Nicobar, QCN7605, QCS405, QCS605, QM215, Rennell, Saipan, SC8180X, SDA845, SDM429, SDM429W, SDM439, SDM450, SDM632, SDM670, SDM710, SDM845, SDX24, SDX55, SM6150, SM7150, SM8150, SM8250, SXR1130, SXR2130
Severity
- EPSS
- 0.2% chance of exploitation in the next 30 days; higher than 8% of CVEs (scores of 2026-11-01)
- CWE
- CWE-120
- Published
- Modified
- Record from
- the NVD, synced
Affected
- qualcomm:apq8009_firmware
- qualcomm:apq8053_firmware
- qualcomm:apq8096au_firmware
- qualcomm:msm8909w_firmware
- qualcomm:msm8917_firmware
- qualcomm:msm8953_firmware
- qualcomm:nicobar_firmware
- qualcomm:qcn7605_firmware
- qualcomm:qcs405_firmware
- qualcomm:qcs605_firmware
- qualcomm:qm215_firmware
- qualcomm:rennell_firmware
- qualcomm:saipan_firmware
- qualcomm:sc8180x_firmware
- qualcomm:sda845_firmware
- qualcomm:sdm429_firmware
- qualcomm:sdm429w_firmware
- qualcomm:sdm439_firmware
- qualcomm:sdm450_firmware
- qualcomm:sdm632_firmware
- qualcomm:sdm670_firmware
- qualcomm:sdm710_firmware
- qualcomm:sdm845_firmware
- qualcomm:sdx24_firmware
- qualcomm:sdx55_firmware
- qualcomm:sm6150_firmware
- qualcomm:sm7150_firmware
- qualcomm:sm8150_firmware
- qualcomm:sm8250_firmware
- qualcomm:sxr1130_firmware
- qualcomm:sxr2130_firmware