Vulnerability Name:

CVE-2019-10566 (CCN-172109)

Assigned:2019-10-07
Published:2019-10-07
Updated:2019-11-22
Summary:Buffer overflow can occur in wlan module if supported rates or extended rates element length is greater than max rate set length in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music in APQ8017, APQ8053, APQ8096AU, MDM9206, MDM9207C, MDM9607, MDM9650, MSM8905, MSM8996AU, Nicobar, QCA6174A, QCA6574AU, QCA9377, QCA9379, QCN7605, QCS405, QCS605, SDA845, SDM670, SDM710, SDM845, SDX20, SM6150, SM8150, SM8250, SXR2130
CVSS v3 Severity:7.8 High (CVSS v3.1 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
6.8 Medium (Temporal CVSS v3.1 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C)
Exploitability Metrics:Attack Vector (AV): 
Attack Complexity (AC): 
Privileges Required (PR): 
User Interaction (UI): 
Scope:Scope (S): 
Impact Metrics:Confidentiality (C): 
Integrity (I): 
Availibility (A): 
8.4 High (CCN CVSS v3.1 Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
7.3 High (CCN Temporal CVSS v3.1 Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C)
Exploitability Metrics:Attack Vector (AV): 
Attack Complexity (AC): 
Privileges Required (PR): 
User Interaction (UI): 
Scope:Scope (S): 
Impact Metrics:Confidentiality (C): 
Integrity (I): 
Availibility (A): 
CVSS v2 Severity:4.6 Medium (CVSS v2 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P)
Exploitability Metrics:Access Vector (AV): Local
Access Complexity (AC): Low
Authentication (Au): None
Impact Metrics:Confidentiality (C): Partial
Integrity (I): Partial
Availibility (A): Partial
7.2 High (CCN CVSS v2 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C)
Exploitability Metrics:Access Vector (AV): Local
Access Complexity (AC): Low
Athentication (Au): None
Impact Metrics:Confidentiality (C): Complete
Integrity (I): Complete
Availibility (A): Complete
Vulnerability Type:CWE-120
Vulnerability Consequences:Gain Access
References:Source: MITRE
Type: CNA
CVE-2019-10566

Source: XF
Type: UNKNOWN
qualcomm-cve201910566-bo(172109)

Source: CCN
Type: Qualcomm Web site
October 2019 Security Bulletin

Source: CONFIRM
Type: Patch, Vendor Advisory
https://www.qualcomm.com/company/product-security/bulletins/october-2019-bulletin

Vulnerable Configuration:Configuration 1:
  • cpe:/o:qualcomm:apq8017_firmware:-:*:*:*:*:*:*:*
  • AND
  • cpe:/h:qualcomm:apq8017:-:*:*:*:*:*:*:*

    • Configuration 2:
  • cpe:/o:qualcomm:apq8053_firmware:-:*:*:*:*:*:*:*
  • AND
  • cpe:/h:qualcomm:apq8053:-:*:*:*:*:*:*:*

    • Configuration 3:
  • cpe:/o:qualcomm:apq8096au_firmware:-:*:*:*:*:*:*:*
  • AND
  • cpe:/h:qualcomm:apq8096au:-:*:*:*:*:*:*:*

    • Configuration 4:
  • cpe:/o:qualcomm:mdm9206_firmware:-:*:*:*:*:*:*:*
  • AND
  • cpe:/h:qualcomm:mdm9206:-:*:*:*:*:*:*:*

    • Configuration 5:
  • cpe:/o:qualcomm:mdm9207c_firmware:-:*:*:*:*:*:*:*
  • AND
  • cpe:/h:qualcomm:mdm9207c:-:*:*:*:*:*:*:*

    • Configuration 6:
  • cpe:/o:qualcomm:mdm9607_firmware:-:*:*:*:*:*:*:*
  • AND
  • cpe:/h:qualcomm:mdm9607:-:*:*:*:*:*:*:*

    • Configuration 7:
  • cpe:/o:qualcomm:mdm9650_firmware:-:*:*:*:*:*:*:*
  • AND
  • cpe:/h:qualcomm:mdm9650:-:*:*:*:*:*:*:*

    • Configuration 8:
  • cpe:/o:qualcomm:msm8905_firmware:-:*:*:*:*:*:*:*
  • AND
  • cpe:/h:qualcomm:msm8905:-:*:*:*:*:*:*:*

    • Configuration 9:
  • cpe:/o:qualcomm:msm8996au_firmware:-:*:*:*:*:*:*:*
  • AND
  • cpe:/h:qualcomm:msm8996au:-:*:*:*:*:*:*:*

    • Configuration 10:
  • cpe:/o:qualcomm:nicobar_firmware:-:*:*:*:*:*:*:*
  • AND
  • cpe:/h:qualcomm:nicobar:-:*:*:*:*:*:*:*

    • Configuration 11:
  • cpe:/o:qualcomm:qca6174a_firmware:-:*:*:*:*:*:*:*
  • AND
  • cpe:/h:qualcomm:qca6174a:-:*:*:*:*:*:*:*

    • Configuration 12:
  • cpe:/o:qualcomm:qca6574au_firmware:-:*:*:*:*:*:*:*
  • AND
  • cpe:/h:qualcomm:qca6574au:-:*:*:*:*:*:*:*

    • Configuration 13:
  • cpe:/o:qualcomm:qca9377_firmware:-:*:*:*:*:*:*:*
  • AND
  • cpe:/h:qualcomm:qca9377:-:*:*:*:*:*:*:*

    • Configuration 14:
  • cpe:/o:qualcomm:qca9379_firmware:-:*:*:*:*:*:*:*
  • AND
  • cpe:/h:qualcomm:qca9379:-:*:*:*:*:*:*:*

    • Configuration 15:
  • cpe:/o:qualcomm:qcn7605_firmware:-:*:*:*:*:*:*:*
  • AND
  • cpe:/h:qualcomm:qcn7605:-:*:*:*:*:*:*:*

    • Configuration 16:
  • cpe:/o:qualcomm:qcs405_firmware:-:*:*:*:*:*:*:*
  • AND
  • cpe:/h:qualcomm:qcs405:-:*:*:*:*:*:*:*

    • Configuration 17:
  • cpe:/o:qualcomm:qcs605_firmware:-:*:*:*:*:*:*:*
  • AND
  • cpe:/h:qualcomm:qcs605:-:*:*:*:*:*:*:*

    • Configuration 18:
  • cpe:/o:qualcomm:sda845_firmware:-:*:*:*:*:*:*:*
  • AND
  • cpe:/h:qualcomm:sda845:-:*:*:*:*:*:*:*

    • Configuration 19:
  • cpe:/o:qualcomm:sdm670_firmware:-:*:*:*:*:*:*:*
  • AND
  • cpe:/h:qualcomm:sdm670:-:*:*:*:*:*:*:*

    • Configuration 20:
  • cpe:/o:qualcomm:sdm710_firmware:-:*:*:*:*:*:*:*
  • AND
  • cpe:/h:qualcomm:sdm710:-:*:*:*:*:*:*:*

    • Configuration 21:
  • cpe:/o:qualcomm:sdm845_firmware:-:*:*:*:*:*:*:*
  • AND
  • cpe:/h:qualcomm:sdm845:-:*:*:*:*:*:*:*

    • Configuration 22:
  • cpe:/o:qualcomm:sdx20_firmware:-:*:*:*:*:*:*:*
  • AND
  • cpe:/h:qualcomm:sdx20:-:*:*:*:*:*:*:*

    • Configuration 23:
  • cpe:/o:qualcomm:sm6150_firmware:-:*:*:*:*:*:*:*
  • AND
  • cpe:/h:qualcomm:sm6150:-:*:*:*:*:*:*:*

    • Configuration 24:
  • cpe:/o:qualcomm:sm8150_firmware:-:*:*:*:*:*:*:*
  • AND
  • cpe:/h:qualcomm:sm8150:-:*:*:*:*:*:*:*

    • Configuration 25:
  • cpe:/o:qualcomm:sm8250_firmware:-:*:*:*:*:*:*:*
  • AND
  • cpe:/h:qualcomm:sm8250:-:*:*:*:*:*:*:*

    • Configuration 26:
  • cpe:/o:qualcomm:sxr2130_firmware:-:*:*:*:*:*:*:*
  • AND
  • cpe:/h:qualcomm:sxr2130:-:*:*:*:*:*:*:*

    • Configuration CCN 1:
  • cpe:/h:qualcomm:snapdragon_mobile:-:*:*:*:*:*:*:*
  • OR cpe:/h:qualcomm:snapdragon_auto:-:*:*:*:*:*:*:*
  • OR cpe:/h:qualcomm:snapdragon_compute:-:*:*:*:*:*:*:*
  • OR cpe:/h:qualcomm:snapdragon_voice_&_music:-:*:*:*:*:*:*:*

    • * Denotes that component is vulnerable
    Vulnerability Name:

    CVE-2019-10566 (CCN-172110)

    Assigned:2019-10-07
    Published:2019-10-07
    Updated:2019-10-07
    Summary:Qualcomm Snapdragon Products a local attacker to obtain sensitive information, caused by a buffer over-read flaw in the WLAN HOST component. An attacker could exploit this vulnerability to obtain sensitive information.
    CVSS v3 Severity:7.8 High (CVSS v3.1 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
    6.8 Medium (Temporal CVSS v3.1 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C)
    Exploitability Metrics:Attack Vector (AV): 
    Attack Complexity (AC): 
    Privileges Required (PR): 
    User Interaction (UI): 
    Scope:Scope (S): 
    Impact Metrics:Confidentiality (C): 
    Integrity (I): 
    Availibility (A): 
    6.2 Medium (CCN CVSS v3.1 Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)
    5.4 Medium (CCN Temporal CVSS v3.1 Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C)
    Exploitability Metrics:Attack Vector (AV): 
    Attack Complexity (AC): 
    Privileges Required (PR): 
    User Interaction (UI): 
    Scope:Scope (S): 
    Impact Metrics:Confidentiality (C): 
    Integrity (I): 
    Availibility (A): 
    CVSS v2 Severity:4.6 Medium (CVSS v2 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P)
    Exploitability Metrics:Access Vector (AV): Local
    Access Complexity (AC): Low
    Authentication (Au): None
    Impact Metrics:Confidentiality (C): Partial
    Integrity (I): Partial
    Availibility (A): Partial
    4.9 Medium (CCN CVSS v2 Vector: AV:L/AC:L/Au:N/C:C/I:N/A:N)
    Exploitability Metrics:Access Vector (AV): Local
    Access Complexity (AC): Low
    Athentication (Au): None
    Impact Metrics:Confidentiality (C): Complete
    Integrity (I): None
    Availibility (A): None
    Vulnerability Consequences:Obtain Information
    References:Source: MITRE
    Type: CNA
    CVE-2019-10566

    Source: XF
    Type: UNKNOWN
    qualcomm-cve201910566-info-disc(172110)

    Source: CCN
    Type: Qualcomm Web site
    October 2019 Security Bulletin

    Vulnerable Configuration:Configuration CCN 1:
  • cpe:/h:qualcomm:snapdragon_mobile:-:*:*:*:*:*:*:*
  • OR cpe:/h:qualcomm:snapdragon_auto:-:*:*:*:*:*:*:*
  • OR cpe:/h:qualcomm:snapdragon_voice_&_music:-:*:*:*:*:*:*:*

    • * Denotes that component is vulnerable
    BACK
    qualcomm apq8017 firmware -
    qualcomm apq8017 -
    qualcomm apq8053 firmware -
    qualcomm apq8053 -
    qualcomm apq8096au firmware -
    qualcomm apq8096au -
    qualcomm mdm9206 firmware -
    qualcomm mdm9206 -
    qualcomm mdm9207c firmware -
    qualcomm mdm9207c -
    qualcomm mdm9607 firmware -
    qualcomm mdm9607 -
    qualcomm mdm9650 firmware -
    qualcomm mdm9650 -
    qualcomm msm8905 firmware -
    qualcomm msm8905 -
    qualcomm msm8996au firmware -
    qualcomm msm8996au -
    qualcomm nicobar firmware -
    qualcomm nicobar -
    qualcomm qca6174a firmware -
    qualcomm qca6174a -
    qualcomm qca6574au firmware -
    qualcomm qca6574au -
    qualcomm qca9377 firmware -
    qualcomm qca9377 -
    qualcomm qca9379 firmware -
    qualcomm qca9379 -
    qualcomm qcn7605 firmware -
    qualcomm qcn7605 -
    qualcomm qcs405 firmware -
    qualcomm qcs405 -
    qualcomm qcs605 firmware -
    qualcomm qcs605 -
    qualcomm sda845 firmware -
    qualcomm sda845 -
    qualcomm sdm670 firmware -
    qualcomm sdm670 -
    qualcomm sdm710 firmware -
    qualcomm sdm710 -
    qualcomm sdm845 firmware -
    qualcomm sdm845 -
    qualcomm sdx20 firmware -
    qualcomm sdx20 -
    qualcomm sm6150 firmware -
    qualcomm sm6150 -
    qualcomm sm8150 firmware -
    qualcomm sm8150 -
    qualcomm sm8250 firmware -
    qualcomm sm8250 -
    qualcomm sxr2130 firmware -
    qualcomm sxr2130 -
    qualcomm snapdragon mobile -
    qualcomm snapdragon auto -
    qualcomm snapdragon compute -
    qualcomm snapdragon voice & music -
    qualcomm snapdragon mobile -
    qualcomm snapdragon auto -
    qualcomm snapdragon voice & music -