CVE-2019-10592

EUVD-2019-2396 · Published Dec 12, 2019

Possible integer overflow while multiplying two integers of 32 bit in QDCM API of get display modes as there is no check on the maximum mode count in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in APQ8017, APQ8053, APQ8096AU, APQ8098, MDM9206, MDM9207C, MDM9607, MSM8909, MSM8909W, MSM8917, MSM8920, MSM8937, MSM8940, MSM8953, MSM8996AU, MSM8998, Nicobar, QCS405, QCS605, QM215, SDA660, SDA845, SDM429, SDM439, SDM450, SDM630, SDM632, SDM636, SDM660, SDM670, SDM710, SDM845, SDX20, SM6150, SM7150, SM8150, SM8250, SXR1130, SXR2130

Technologies

Qualcomm Msm8953 FirmwareQualcomm Apq8098 FirmwareQualcomm Sdm636Qualcomm Sm7150Qualcomm Mdm9207CQualcomm Msm8920Qualcomm Qcs605 FirmwareQualcomm Msm8940 FirmwareQualcomm Sda660Qualcomm Qm215 FirmwareQualcomm Qcs605Qualcomm Sm8250Qualcomm Sdm439 FirmwareQualcomm Mdm9607 FirmwareQualcomm Apq8096Au FirmwareQualcomm Apq8098Qualcomm Sdm630Qualcomm Msm8909 FirmwareQualcomm Msm8998 FirmwareQualcomm Sxr1130 FirmwareQualcomm Sdm670Qualcomm Sdm845 FirmwareQualcomm Sdm636 FirmwareQualcomm Msm8940Qualcomm Sdm439Qualcomm Apq8017 FirmwareQualcomm Apq8053Qualcomm Mdm9607Qualcomm Qcs405 FirmwareQualcomm Apq8096AuQualcomm Msm8909WQualcomm Sm8150Qualcomm Nicobar FirmwareQualcomm Sda845Qualcomm Sdm429 FirmwareQualcomm Apq8017Qualcomm Msm8917 FirmwareQualcomm NicobarQualcomm Sda845 FirmwareQualcomm Qm215Qualcomm Sdm630 FirmwareQualcomm Mdm9206 FirmwareQualcomm Mdm9206Qualcomm Apq8053 FirmwareQualcomm Sm8150 FirmwareQualcomm Sda660 FirmwareQualcomm Msm8909Qualcomm Msm8996Au FirmwareQualcomm Mdm9207C FirmwareQualcomm Msm8920 FirmwareQualcomm Msm8998Qualcomm Msm8953Qualcomm Sdm845Qualcomm Sxr2130 FirmwareQualcomm Qcs405Qualcomm Sxr2130Qualcomm Sdx20 FirmwareQualcomm Msm8937Qualcomm Msm8996AuQualcomm Sdm710 FirmwareQualcomm Msm8909W FirmwareQualcomm Sdm710Qualcomm Sm6150 FirmwareQualcomm Sdm450 FirmwareQualcomm Sdm670 FirmwareQualcomm Sdm660 FirmwareQualcomm Sdx20Qualcomm Sdm429Qualcomm Sm6150Qualcomm Sxr1130Qualcomm Msm8937 FirmwareQualcomm Sm7150 FirmwareQualcomm Sm8250 FirmwareQualcomm Sdm632 FirmwareQualcomm Sdm450Qualcomm Sdm632Qualcomm Msm8917Qualcomm Sdm660

Weaknesses

CWE-190

CVSS scores

v3.17.8CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
v2.04.6AV:L/AC:L/Au:N/C:P/I:P/A:P

MITRE ATT&CK

Inferred

Where this vulnerability fits in an attack

ReconImpact

Privilege Escalation

T1068Exploitation for Privilege Escalation

References

https://www.qualcomm.com/company/product-security/bulletins/november-2019-bulletin

Potentially impacted assets

See if this affects your attack surface

CVE-2019-10592

Technologies

Weaknesses

CVSS scores

MITRE ATT&CK

References

Potentially impacted assets

Our latest news

PHP2Shell: Two Critical RCE Flaws in PHP (CVSS 9.2)

Manage External Security Across All Your Entities

Will AI Become the Next Hacker? Bruce Schneier Answers at DEF CON 34

Take 15 minutes to discover our platform with our experts