What is CVE-2019-10612?

CVE-2019-10612 is a critical-severity vulnerability in Qualcomm Mdm9205, classified under Out-of-bounds Write. CVSS score: 9.8/10. Published 2020-03-05.

How severe is CVE-2019-10612?

Critical severity. CVSS v3 base score is 9.8 out of 10.

Buffer overflow in Qualcomm Mdm9205

CVE-2019-10612

UTCB object has a function pointer called by the reaper to deallocate its memory resources and this address can potentially be corrupted by stack overflow in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industri…

Vulnerability class: Buffer Overflow

EPSS: 0.009 (55.0th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 9.8 (Critical). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H.

Affected products

Qualcomm Mdm9205
Qualcomm Mdm9205_firmware
Qualcomm Mdm9650
Qualcomm Mdm9650_firmware
Qualcomm Qcs605
Qualcomm Qcs605_firmware
Qualcomm Sa6155p
Qualcomm Sa6155p_firmware
Qualcomm Sc8180x
Qualcomm Sc8180x_firmware

Weakness classification (CWE)

CWE-787 — Out-of-bounds Write

References

product-security@qualcomm.com (x_refsource_CONFIRM, Vendor Advisory)

Frequently asked questions

What is CVE-2019-10612?: CVE-2019-10612 is a critical-severity vulnerability in Qualcomm Mdm9205, classified under Out-of-bounds Write. CVSS score: 9.8/10. Published 2020-03-05.
How severe is CVE-2019-10612?: Critical severity. CVSS v3 base score is 9.8 out of 10.