CVSS 3.1
5.5 mediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:HCVE-2019-10616
Medium (5.5) in qualcomm. EPSS 0.2% chance of exploitation in the next 30 days.
Possibility of null pointer access if the SPDM commands are executed in the non-standard way in TZ. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking in APQ8009, APQ8016, MDM9150, MDM9206, MDM9607, MDM9650, MSM8905, MSM8909, MSM8909W, MSM8998, SA6155P, SDX24
Severity
- EPSS
- 0.2% chance of exploitation in the next 30 days; higher than 8% of CVEs (scores of 2026-10-31)
- CWE
- CWE-476
- Published
- Modified
- Record from
- the NVD, synced
Affected
- qualcomm:apq8009_firmware
- qualcomm:apq8016_firmware
- qualcomm:mdm9150_firmware
- qualcomm:mdm9206_firmware
- qualcomm:mdm9607_firmware
- qualcomm:mdm9650_firmware
- qualcomm:msm8905_firmware
- qualcomm:msm8909_firmware
- qualcomm:msm8909w_firmware
- qualcomm:msm8998_firmware
- qualcomm:sa6155p_firmware
- qualcomm:sdx24_firmware