CVSS 3.1
7.8 highCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HCVE-2019-10624
High (7.8) in qualcomm. EPSS 0.2% chance of exploitation in the next 30 days.
While handling the vendor command there is an integer truncation issue that could yield a buffer overflow due to int data type copied to u8 data type in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile in APQ8096AU, MSM8996AU, QCA6574AU, QCN7605, Rennell, SC8180X, SDM710, SDX55, SM7150, SM8150, SM8250, SXR2130
Severity
- EPSS
- 0.2% chance of exploitation in the next 30 days; higher than 8% of CVEs (scores of 2026-10-31)
- CWEs
- CWE-119, CWE-681
- Published
- Modified
- Record from
- the NVD, synced
Affected
- qualcomm:apq8096au_firmware
- qualcomm:msm8996au_firmware
- qualcomm:qca6574au_firmware
- qualcomm:qcn7605_firmware
- qualcomm:rennell_firmware
- qualcomm:sc8180x_firmware
- qualcomm:sdm710_firmware
- qualcomm:sdx55_firmware
- qualcomm:sm7150_firmware
- qualcomm:sm8150_firmware
- qualcomm:sm8250_firmware
- qualcomm:sxr2130_firmware