CyberRota Analysis
This is a high severity vulnerability with a CVSS score of 7.8. See the original NVD description below for full technical details.
CVE
CVE-2019-10537
Severity
HIGH
CVSS
7.8
EPSS
0.20%
Original NVD Description
Improper validation of event buffer extracted from FW response can lead to integer overflow, which will allow to pass the length check and eventually will lead to buffer overwrite when event data is copied to context buffer in Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music in MDM9607, Nicobar, QCA6574AU, QCN7605, QCS405, QCS605, SDM660, SDM845, SDX55, SM6150, SM7150, SM8150, SM8250, SXR1130, SXR2130
Related CVEs
Other vulnerabilities affecting the same vendor(s)