CVE-2019-10531
Last modified
CVE-2019-10531 is a critical-severity vulnerability rated 9.8/10 on the CVSS scale. Incorrect reading of system image resulting in buffer overflow when size of system image is increased in Snapdragon Auto, Snapdragon Mobile, Snapdragon Wearables in MDM9607, MSM8909W, Qualcomm 215, SD 210/SD 212/SD 205, SD 425, SD 439 / SD 429, SD 450, SD 625, SD 632, SDM439. EPSS estimates a 0.90% chance of exploitation in the next 30 days.
Description
Incorrect reading of system image resulting in buffer overflow when size of system image is increased in Snapdragon Auto, Snapdragon Mobile, Snapdragon Wearables in MDM9607, MSM8909W, Qualcomm 215, SD 210/SD 212/SD 205, SD 425, SD 439 / SD 429, SD 450, SD 625, SD 632, SDM439
Metrics
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Qualcomm | Mdm9607 Firmware | All versions |
| Qualcomm | Msm8909w Firmware | All versions |
| Qualcomm | Qualcomm 215 Firmware | All versions |
| Qualcomm | Sd 210 Firmware | All versions |
| Qualcomm | Sd 212 Firmware | All versions |
| Qualcomm | Sd 205 Firmware | All versions |
| Qualcomm | Sd 425 Firmware | All versions |
| Qualcomm | Sd 439 Firmware | All versions |
| Qualcomm | Sd 429 Firmware | All versions |
| Qualcomm | Sd 450 Firmware | All versions |
| Qualcomm | Sd 625 Firmware | All versions |
| Qualcomm | Sd 632 Firmware | All versions |
| Qualcomm | Sdm439 Firmware | All versions |
References
- https://source.android.com/security/bulletin/Patch, Vendor Advisory
- https://source.android.com/security/bulletin/Patch, Vendor Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2019-10531?
How severe is CVE-2019-10531?
How do I fix CVE-2019-10531?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2019
- CVE-2019-10526Out of bound write in WLAN driver due to NULL character not …9.8
- CVE-2019-10527u'SMEM partition can be manipulated in case of any compromis…7.8
- CVE-2019-10528Use after free issue in kernel while accessing freed mdlog s…9.8
- CVE-2019-10529Possible use after free issue due to race condition while at…8.1
- CVE-2019-1053An elevation of privilege vulnerability exists when the Wind…6.3
- CVE-2019-10530Lack of check of data truncation on user supplied data in ke…7.8
- CVE-2019-10532Null-pointer dereference issue can occur while calculating s…9.8
- CVE-2019-10533Out of bound access due to improper validation of array inde…9.8
- CVE-2019-10534Null-pointer dereference can occur while accessing the super…9.8
- CVE-2019-10535Improper validation for loop variable received from firmware…5.5
- CVE-2019-10536Potential double free scenario if driver receives another DI…7.8
- CVE-2019-10537Improper validation of event buffer extracted from FW respon…7.8
Are you affected by CVE-2019-10531?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST