Vulnerability Name:

CVE-2019-10537 (CCN-173411)

Assigned:2019-12-02
Published:2019-12-02
Updated:2019-12-23
Summary:Improper validation of event buffer extracted from FW response can lead to integer overflow, which will allow to pass the length check and eventually will lead to buffer overwrite when event data is copied to context buffer in Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music in MDM9607, Nicobar, QCA6574AU, QCN7605, QCS405, QCS605, SDM660, SDM845, SDX55, SM6150, SM7150, SM8150, SM8250, SXR1130, SXR2130
CVSS v3 Severity:7.8 High (CVSS v3.1 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
6.8 Medium (Temporal CVSS v3.1 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C)
Exploitability Metrics:Attack Vector (AV): Local
Attack Complexity (AC): Low
Privileges Required (PR): Low
User Interaction (UI): None
Scope:Scope (S): Unchanged
Impact Metrics:Confidentiality (C): High
Integrity (I): High
Availibility (A): High
8.4 High (CCN CVSS v3.1 Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
7.3 High (CCN Temporal CVSS v3.1 Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C)
Exploitability Metrics:Attack Vector (AV): Local
Attack Complexity (AC): Low
Privileges Required (PR): None
User Interaction (UI): None
Scope:Scope (S): Unchanged
Impact Metrics:Confidentiality (C): High
Integrity (I): High
Availibility (A): High
CVSS v2 Severity:7.2 High (CVSS v2 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C)
Exploitability Metrics:Access Vector (AV): Local
Access Complexity (AC): Low
Authentication (Au): None
Impact Metrics:Confidentiality (C): Complete
Integrity (I): Complete
Availibility (A): Complete
7.2 High (CCN CVSS v2 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C)
Exploitability Metrics:Access Vector (AV): Local
Access Complexity (AC): Low
Athentication (Au): None
Impact Metrics:Confidentiality (C): Complete
Integrity (I): Complete
Availibility (A): Complete
Vulnerability Type:CWE-190
Vulnerability Consequences:Gain Access
References:Source: MITRE
Type: CNA
CVE-2019-10537

Source: XF
Type: UNKNOWN
qualcomm-cve201910537-bo(173411)

Source: CCN
Type: Qualcomm Web site
December 2019 Security Bulletin

Source: CONFIRM
Type: Patch, Vendor Advisory
https://www.qualcomm.com/company/product-security/bulletins/december-2019-bulletin

Vulnerable Configuration:Configuration 1:
  • cpe:/o:qualcomm:mdm9607_firmware:-:*:*:*:*:*:*:*
  • AND
  • cpe:/h:qualcomm:mdm9607:-:*:*:*:*:*:*:*

    • Configuration 2:
  • cpe:/o:qualcomm:nicobar_firmware:-:*:*:*:*:*:*:*
  • AND
  • cpe:/h:qualcomm:nicobar:-:*:*:*:*:*:*:*

    • Configuration 3:
  • cpe:/o:qualcomm:qca6574au_firmware:-:*:*:*:*:*:*:*
  • AND
  • cpe:/h:qualcomm:qca6574au:-:*:*:*:*:*:*:*

    • Configuration 4:
  • cpe:/o:qualcomm:qcn7605_firmware:-:*:*:*:*:*:*:*
  • AND
  • cpe:/h:qualcomm:qcn7605:-:*:*:*:*:*:*:*

    • Configuration 5:
  • cpe:/o:qualcomm:qcs405_firmware:-:*:*:*:*:*:*:*
  • AND
  • cpe:/h:qualcomm:qcs405:-:*:*:*:*:*:*:*

    • Configuration 6:
  • cpe:/o:qualcomm:qcs605_firmware:-:*:*:*:*:*:*:*
  • AND
  • cpe:/h:qualcomm:qcs605:-:*:*:*:*:*:*:*

    • Configuration 7:
  • cpe:/o:qualcomm:sdm660_firmware:-:*:*:*:*:*:*:*
  • AND
  • cpe:/h:qualcomm:sdm660:-:*:*:*:*:*:*:*

    • Configuration 8:
  • cpe:/o:qualcomm:sdm845_firmware:-:*:*:*:*:*:*:*
  • AND
  • cpe:/h:qualcomm:sdm845:-:*:*:*:*:*:*:*

    • Configuration 9:
  • cpe:/o:qualcomm:sdx55_firmware:-:*:*:*:*:*:*:*
  • AND
  • cpe:/h:qualcomm:sdx55:-:*:*:*:*:*:*:*

    • Configuration 10:
  • cpe:/o:qualcomm:sm6150_firmware:-:*:*:*:*:*:*:*
  • AND
  • cpe:/h:qualcomm:sm6150:-:*:*:*:*:*:*:*

    • Configuration 11:
  • cpe:/o:qualcomm:sm7150_firmware:-:*:*:*:*:*:*:*
  • AND
  • cpe:/h:qualcomm:sm7150:-:*:*:*:*:*:*:*

    • Configuration 12:
  • cpe:/o:qualcomm:sm8150_firmware:-:*:*:*:*:*:*:*
  • AND
  • cpe:/h:qualcomm:sm8150:-:*:*:*:*:*:*:*

    • Configuration 13:
  • cpe:/o:qualcomm:sm8250_firmware:-:*:*:*:*:*:*:*
  • AND
  • cpe:/h:qualcomm:sm8250:-:*:*:*:*:*:*:*

    • Configuration 14:
  • cpe:/o:qualcomm:sxr1130_firmware:-:*:*:*:*:*:*:*
  • AND
  • cpe:/h:qualcomm:sxr1130:-:*:*:*:*:*:*:*

    • Configuration 15:
  • cpe:/o:qualcomm:sxr2130_firmware:-:*:*:*:*:*:*:*
  • AND
  • cpe:/h:qualcomm:sxr2130:-:*:*:*:*:*:*:*

    • Configuration CCN 1:
  • cpe:/h:qualcomm:snapdragon_mobile:-:*:*:*:*:*:*:*
  • OR cpe:/h:qualcomm:snapdragon_auto:-:*:*:*:*:*:*:*
  • OR cpe:/h:qualcomm:snapdragon_consumer_electronics_connectivity:-:*:*:*:*:*:*:*
  • OR cpe:/h:qualcomm:snapdragon_consumer_internet_of_things:-:*:*:*:*:*:*:*
  • OR cpe:/h:qualcomm:snapdragon_industrial_internet_of_things:-:*:*:*:*:*:*:*
  • OR cpe:/h:qualcomm:snapdragon_voice_&_music:-:*:*:*:*:*:*:*

    • * Denotes that component is vulnerable
    BACK
    qualcomm mdm9607 firmware -
    qualcomm mdm9607 -
    qualcomm nicobar firmware -
    qualcomm nicobar -
    qualcomm qca6574au firmware -
    qualcomm qca6574au -
    qualcomm qcn7605 firmware -
    qualcomm qcn7605 -
    qualcomm qcs405 firmware -
    qualcomm qcs405 -
    qualcomm qcs605 firmware -
    qualcomm qcs605 -
    qualcomm sdm660 firmware -
    qualcomm sdm660 -
    qualcomm sdm845 firmware -
    qualcomm sdm845 -
    qualcomm sdx55 firmware -
    qualcomm sdx55 -
    qualcomm sm6150 firmware -
    qualcomm sm6150 -
    qualcomm sm7150 firmware -
    qualcomm sm7150 -
    qualcomm sm8150 firmware -
    qualcomm sm8150 -
    qualcomm sm8250 firmware -
    qualcomm sm8250 -
    qualcomm sxr1130 firmware -
    qualcomm sxr1130 -
    qualcomm sxr2130 firmware -
    qualcomm sxr2130 -
    qualcomm snapdragon mobile -
    qualcomm snapdragon auto -
    qualcomm snapdragon consumer electronics connectivity -
    qualcomm snapdragon consumer internet of things -
    qualcomm snapdragon industrial internet of things -
    qualcomm snapdragon voice & music -