// For flags

CVE-2019-10540

 

Severity Score

9.8
*CVSS v3.1

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

0
*Multiple Sources

Exploited in Wild

-
*KEV

Decision

-
*SSVC
Descriptions

Buffer overflow in WLAN NAN function due to lack of check of count value received in NAN availability attribute in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking in IPQ8074, MSM8996AU, QCA6174A, QCA6574AU, QCA8081, QCA9377, QCA9379, QCS404, QCS405, QCS605, SD 636, SD 665, SD 675, SD 712 / SD 710 / SD 670, SD 730, SD 820, SD 835, SD 845 / SD 850, SD 855, SD 8CX, SDA660, SDM630, SDM660, SXR1130

Un desbordamiento de búfer en la función WLAN NAN debido a la falta de comprobación del valor de conteo recibido en el atributo de disponibilidad NAN en los productos Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking en las versiones IPQ8074, MSM8996AU, QCA6174A, QCA6574AU, QCA8081, QCA9377, QCA9379, QCS404, QCS405, QCS605, SD 636, SD 665, SD 675, SD 712 / SD 710 / SD 670, SD 730, SD 820, SD 835, SD 845 / SD 850, SD 855, SD 8CX, SDA660, SDM630, SDM660, SXR1130.

*Credits: N/A
CVSS Scores
Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
High
Attack Vector
Network
Attack Complexity
Low
Authentication
None
Confidentiality
Complete
Integrity
Complete
Availability
Complete
* Common Vulnerability Scoring System
SSVC
  • Decision:-
Exploitation
-
Automatable
-
Tech. Impact
-
* Organization's Worst-case Scenario
Timeline
  • 2019-03-29 CVE Reserved
  • 2019-09-30 CVE Published
  • 2023-03-07 EPSS Updated
  • 2024-08-04 CVE Updated
  • ---------- Exploited in Wild
  • ---------- KEV Due Date
  • ---------- First Exploit
CWE
  • CWE-120: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
CAPEC
References (1)
Affected Vendors, Products, and Versions
Vendor Product Version Other Status
Vendor Product Version Other Status <-- --> Vendor Product Version Other Status
Qualcomm
Search vendor "Qualcomm"
Ipq8074 Firmware
Search vendor "Qualcomm" for product "Ipq8074 Firmware"
--
Affected
in Qualcomm
Search vendor "Qualcomm"
Ipq8074
Search vendor "Qualcomm" for product "Ipq8074"
--
Safe
Qualcomm
Search vendor "Qualcomm"
Msm8996au Firmware
Search vendor "Qualcomm" for product "Msm8996au Firmware"
--
Affected
in Qualcomm
Search vendor "Qualcomm"
Msm8996au
Search vendor "Qualcomm" for product "Msm8996au"
--
Safe
Qualcomm
Search vendor "Qualcomm"
Qca6174a Firmware
Search vendor "Qualcomm" for product "Qca6174a Firmware"
--
Affected
in Qualcomm
Search vendor "Qualcomm"
Qca6174a
Search vendor "Qualcomm" for product "Qca6174a"
--
Safe
Qualcomm
Search vendor "Qualcomm"
Qca6574au Firmware
Search vendor "Qualcomm" for product "Qca6574au Firmware"
--
Affected
in Qualcomm
Search vendor "Qualcomm"
Qca6574au
Search vendor "Qualcomm" for product "Qca6574au"
--
Safe
Qualcomm
Search vendor "Qualcomm"
Qca8081 Firmware
Search vendor "Qualcomm" for product "Qca8081 Firmware"
--
Affected
in Qualcomm
Search vendor "Qualcomm"
Qca8081
Search vendor "Qualcomm" for product "Qca8081"
--
Safe
Qualcomm
Search vendor "Qualcomm"
Qca9377 Firmware
Search vendor "Qualcomm" for product "Qca9377 Firmware"
--
Affected
in Qualcomm
Search vendor "Qualcomm"
Qca9377
Search vendor "Qualcomm" for product "Qca9377"
--
Safe
Qualcomm
Search vendor "Qualcomm"
Qca9379 Firmware
Search vendor "Qualcomm" for product "Qca9379 Firmware"
--
Affected
in Qualcomm
Search vendor "Qualcomm"
Qca9379
Search vendor "Qualcomm" for product "Qca9379"
--
Safe
Qualcomm
Search vendor "Qualcomm"
Qcs404 Firmware
Search vendor "Qualcomm" for product "Qcs404 Firmware"
--
Affected
in Qualcomm
Search vendor "Qualcomm"
Qcs404
Search vendor "Qualcomm" for product "Qcs404"
--
Safe
Qualcomm
Search vendor "Qualcomm"
Qcs405 Firmware
Search vendor "Qualcomm" for product "Qcs405 Firmware"
--
Affected
in Qualcomm
Search vendor "Qualcomm"
Qcs405
Search vendor "Qualcomm" for product "Qcs405"
--
Safe
Qualcomm
Search vendor "Qualcomm"
Qcs605 Firmware
Search vendor "Qualcomm" for product "Qcs605 Firmware"
--
Affected
in Qualcomm
Search vendor "Qualcomm"
Qcs605
Search vendor "Qualcomm" for product "Qcs605"
--
Safe
Qualcomm
Search vendor "Qualcomm"
Sd 636 Firmware
Search vendor "Qualcomm" for product "Sd 636 Firmware"
--
Affected
in Qualcomm
Search vendor "Qualcomm"
Sd 636
Search vendor "Qualcomm" for product "Sd 636"
--
Safe
Qualcomm
Search vendor "Qualcomm"
Sd 665 Firmware
Search vendor "Qualcomm" for product "Sd 665 Firmware"
--
Affected
in Qualcomm
Search vendor "Qualcomm"
Sd 665
Search vendor "Qualcomm" for product "Sd 665"
--
Safe
Qualcomm
Search vendor "Qualcomm"
Sd 675 Firmware
Search vendor "Qualcomm" for product "Sd 675 Firmware"
--
Affected
in Qualcomm
Search vendor "Qualcomm"
Sd 675
Search vendor "Qualcomm" for product "Sd 675"
--
Safe
Qualcomm
Search vendor "Qualcomm"
Sd 712 Firmware
Search vendor "Qualcomm" for product "Sd 712 Firmware"
--
Affected
in Qualcomm
Search vendor "Qualcomm"
Sd 712
Search vendor "Qualcomm" for product "Sd 712"
--
Safe
Qualcomm
Search vendor "Qualcomm"
Sd 710 Firmware
Search vendor "Qualcomm" for product "Sd 710 Firmware"
--
Affected
in Qualcomm
Search vendor "Qualcomm"
Sd 710
Search vendor "Qualcomm" for product "Sd 710"
--
Safe
Qualcomm
Search vendor "Qualcomm"
Sd 670 Firmware
Search vendor "Qualcomm" for product "Sd 670 Firmware"
--
Affected
in Qualcomm
Search vendor "Qualcomm"
Sd 670
Search vendor "Qualcomm" for product "Sd 670"
--
Safe
Qualcomm
Search vendor "Qualcomm"
Sd 730 Firmware
Search vendor "Qualcomm" for product "Sd 730 Firmware"
--
Affected
in Qualcomm
Search vendor "Qualcomm"
Sd 730
Search vendor "Qualcomm" for product "Sd 730"
--
Safe
Qualcomm
Search vendor "Qualcomm"
Sd 820 Firmware
Search vendor "Qualcomm" for product "Sd 820 Firmware"
--
Affected
in Qualcomm
Search vendor "Qualcomm"
Sd 820
Search vendor "Qualcomm" for product "Sd 820"
--
Safe
Qualcomm
Search vendor "Qualcomm"
Sd 835 Firmware
Search vendor "Qualcomm" for product "Sd 835 Firmware"
--
Affected
in Qualcomm
Search vendor "Qualcomm"
Sd 835
Search vendor "Qualcomm" for product "Sd 835"
--
Safe
Qualcomm
Search vendor "Qualcomm"
Sd 845 Firmware
Search vendor "Qualcomm" for product "Sd 845 Firmware"
--
Affected
in Qualcomm
Search vendor "Qualcomm"
Sd 845
Search vendor "Qualcomm" for product "Sd 845"
--
Safe
Qualcomm
Search vendor "Qualcomm"
Sd 850 Firmware
Search vendor "Qualcomm" for product "Sd 850 Firmware"
--
Affected
in Qualcomm
Search vendor "Qualcomm"
Sd 850
Search vendor "Qualcomm" for product "Sd 850"
--
Safe
Qualcomm
Search vendor "Qualcomm"
Sd 855 Firmware
Search vendor "Qualcomm" for product "Sd 855 Firmware"
--
Affected
in Qualcomm
Search vendor "Qualcomm"
Sd 855
Search vendor "Qualcomm" for product "Sd 855"
--
Safe
Qualcomm
Search vendor "Qualcomm"
Sd 8cx Firmware
Search vendor "Qualcomm" for product "Sd 8cx Firmware"
--
Affected
in Qualcomm
Search vendor "Qualcomm"
Sd 8cx
Search vendor "Qualcomm" for product "Sd 8cx"
--
Safe
Qualcomm
Search vendor "Qualcomm"
Sda660 Firmware
Search vendor "Qualcomm" for product "Sda660 Firmware"
--
Affected
in Qualcomm
Search vendor "Qualcomm"
Sda660
Search vendor "Qualcomm" for product "Sda660"
--
Safe
Qualcomm
Search vendor "Qualcomm"
Sdm630 Firmware
Search vendor "Qualcomm" for product "Sdm630 Firmware"
--
Affected
in Qualcomm
Search vendor "Qualcomm"
Sdm630
Search vendor "Qualcomm" for product "Sdm630"
--
Safe
Qualcomm
Search vendor "Qualcomm"
Sdm660 Firmware
Search vendor "Qualcomm" for product "Sdm660 Firmware"
--
Affected
in Qualcomm
Search vendor "Qualcomm"
Sdm660
Search vendor "Qualcomm" for product "Sdm660"
--
Safe
Qualcomm
Search vendor "Qualcomm"
Sxr1130 Firmware
Search vendor "Qualcomm" for product "Sxr1130 Firmware"
--
Affected
in Qualcomm
Search vendor "Qualcomm"
Sxr1130
Search vendor "Qualcomm" for product "Sxr1130"
--
Safe