Medium severity · published Dec 12, 2019
CVE-2019-10545
Null pointer dereference issue in kernel due to missing check related to LLC support in GPU in Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer…
5.5
CVSS
0.2%
EPSS
No
On KEV
Description
Null pointer dereference issue in kernel due to missing check related to LLC support in GPU in Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Mobile, Snapdragon Voice & Music in QCS605, SDM670, SDM710, SM6150, SM7150, SM8150
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Attack vector
Local
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
None
Integrity
None
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.2% · higher than 8% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
QF
Qcs605 Firmware · Qualcomm
All versions, or not specified · source: NVD
SF
Sdm670 Firmware · Qualcomm
All versions, or not specified · source: NVD
SF
Sdm710 Firmware · Qualcomm
All versions, or not specified · source: NVD
SF
Sm6150 Firmware · Qualcomm
All versions, or not specified · source: NVD
SF
Sm7150 Firmware · Qualcomm
All versions, or not specified · source: NVD
SF
Sm8150 Firmware · Qualcomm
All versions, or not specified · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2019-10545
CVE.org
https://www.cve.org/CVERecord?id=CVE-2019-10545
Patch
https://www.qualcomm.com/company/product-security/bulletins/november-2019-bulletin
More from Qcs605 Firmware
9.8
CVE-2023-28543
A malformed DLC can trigger Memory Corruption in SNPE library due to out of bounds read, such as by loading an untrusted model (e.g
9.8
CVE-2022-40537
Memory corruption in Bluetooth HOST while processing the AVRC_PDU_GET_PLAYER_APP_VALUE_TEXT AVRCP response
9.8
CVE-2022-40515
Memory corruption in Video due to double free while playing 3gp clip with invalid metadata atoms
9.8
CVE-2022-33234
Memory corruption in video due to configuration weakness
9.8
CVE-2022-25688
Memory corruption in video due to buffer overflow while parsing ps video clips in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon…