Vulnerabilities > CVE-2019-10549 - NULL Pointer Dereference vulnerability in Qualcomm products

047910
CVSS 7.5 - HIGH
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
NONE
Integrity impact
NONE
Availability impact
HIGH
network
low complexity
qualcomm
CWE-476
NVD
Published: 2020-03-05
Updated: 2020-03-07

Summary

Null pointer dereference issue can happen due to improper validation of CSEQ header response received from network in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables in MSM8905, MSM8909, MSM8917, MSM8920, MSM8937, MSM8940, MSM8953, Nicobar, QCM2150, QM215, Rennell, SC8180X, SDM429, SDM429W, SDM439, SDM450, SDM632, SDX24, SDX55, SM6150, SM7150, SM8150

Vulnerable Configurations

Part Description Count
OS
Qualcomm
22
Hardware
Qualcomm
22

Common Weakness Enumeration (CWE)

References