Details of VAR-201909-1455

ID

VAR-201909-1455

CVE

CVE-2019-10510

TITLE

plural Snapdragon In product NULL Pointer dereference vulnerability

Trust: 0.8

sources: JVNDB: JVNDB-2019-010016

DESCRIPTION

BT process died and BT toggled due to null pointer dereference when invalid vendor pass through command sent from remote in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Mobile, Snapdragon Voice & Music in QCS405, QCS605, SD 636, SD 675, SD 730, SD 820A, SD 835, SD 845 / SD 850, SD 855, SDM630, SDM660. plural Snapdragon The product includes NULL A vulnerability related to pointer dereference exists.Tampering with information and disrupting service operations (DoS) There is a possibility of being put into a state. Qualcomm SD 820A and others are a central processing unit (CPU) product of Qualcomm (Qualcomm). A code issue vulnerability exists in several Qualcomm products. This vulnerability stems from improper design or implementation problems in the code development process of network systems or products. The following products and versions are affected: Qualcomm QCS405; QCS605; SD 636; SD 675; SD 730; SD 820A; SD 835; SD 845; SD 850; SD 855;

Trust: 1.71

sources: NVD: CVE-2019-10510 // JVNDB: JVNDB-2019-010016 // VULHUB: VHN-142064

AFFECTED PRODUCTS

vendor:	qualcomm	model:	sd 850	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	sdm630	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	sdm660	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	sd 845	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qcs405	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qcs605	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	sd 636	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	sd 855	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	sd 835	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	sd 675	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	sd 820a	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	sd 730	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qcs405	scope:	-	version:	-	Trust: 0.8
vendor:	qualcomm	model:	qcs605	scope:	-	version:	-	Trust: 0.8
vendor:	qualcomm	model:	sd 636	scope:	-	version:	-	Trust: 0.8
vendor:	qualcomm	model:	sd 675	scope:	-	version:	-	Trust: 0.8
vendor:	qualcomm	model:	sd 730	scope:	-	version:	-	Trust: 0.8
vendor:	qualcomm	model:	sd 820a	scope:	-	version:	-	Trust: 0.8
vendor:	qualcomm	model:	sd 835	scope:	-	version:	-	Trust: 0.8
vendor:	qualcomm	model:	sd 845	scope:	-	version:	-	Trust: 0.8
vendor:	qualcomm	model:	sd 850	scope:	-	version:	-	Trust: 0.8
vendor:	qualcomm	model:	sd 855	scope:	-	version:	-	Trust: 0.8

sources: JVNDB: JVNDB-2019-010016 // NVD: CVE-2019-10510

CVSS

SEVERITY

CVSSV2

CVSSV3

nvd@nist.gov:	CVE-2019-10510
value:	HIGH
Trust: 1.0
NVD:	CVE-2019-10510
value:	HIGH
Trust: 0.8
CNNVD:	CNNVD-201908-440
value:	HIGH
Trust: 0.6
VULHUB:	VHN-142064
value:	HIGH
Trust: 0.1

nvd@nist.gov:	CVE-2019-10510
severity:	HIGH
baseScore:	8.5
vectorString:	AV:N/AC:L/AU:N/C:N/I:P/A:C
accessVector:	NETWORK
accessComplexity:	LOW
authentication:	NONE
confidentialityImpact:	NONE
integrityImpact:	PARTIAL
availabilityImpact:	COMPLETE
exploitabilityScore:	10.0
impactScore:	7.8
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 1.8
VULHUB:	VHN-142064
severity:	HIGH
baseScore:	8.5
vectorString:	AV:N/AC:L/AU:N/C:N/I:P/A:C
accessVector:	NETWORK
accessComplexity:	LOW
authentication:	NONE
confidentialityImpact:	NONE
integrityImpact:	PARTIAL
availabilityImpact:	COMPLETE
exploitabilityScore:	10.0
impactScore:	7.8
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 0.1

nvd@nist.gov:	CVE-2019-10510
baseSeverity:	HIGH
baseScore:	8.2
vectorString:	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H
attackVector:	NETWORK
attackComplexity:	LOW
privilegesRequired:	NONE
userInteraction:	NONE
scope:	UNCHANGED
confidentialityImpact:	NONE
integrityImpact:	LOW
availabilityImpact:	HIGH
exploitabilityScore:	3.9
impactScore:	4.2
version:	3.1
Trust: 1.0
NVD:	CVE-2019-10510
baseSeverity:	HIGH
baseScore:	8.2
vectorString:	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H
attackVector:	NETWORK
attackComplexity:	LOW
privilegesRequired:	NONE
userInteraction:	NONE
scope:	UNCHANGED
confidentialityImpact:	NONE
integrityImpact:	LOW
availabilityImpact:	HIGH
exploitabilityScore:	NONE
impactScore:	NONE
version:	3.0
Trust: 0.8

sources: VULHUB: VHN-142064 // JVNDB: JVNDB-2019-010016 // CNNVD: CNNVD-201908-440 // NVD: CVE-2019-10510

PROBLEMTYPE DATA

problemtype:

CWE-476

Trust: 1.9

sources: VULHUB: VHN-142064 // JVNDB: JVNDB-2019-010016 // NVD: CVE-2019-10510

TYPE

code problem

Trust: 0.6

sources: CNNVD: CNNVD-201908-440

CONFIGURATIONS

sources: JVNDB: JVNDB-2019-010016

PATCH

title:	August 2019 Code Aurora Security Bulletin	url:	https://www.codeaurora.org/security-bulletin/2019/08/05/august-2019-code-aurora-security-bulletin	Trust: 0.8
title:	Android Qualcomm BTHOST Fixes for component security vulnerabilities	url:	http://www.cnnvd.org.cn/web/xxk/bdxqById.tag?id=96177	Trust: 0.6

sources: JVNDB: JVNDB-2019-010016 // CNNVD: CNNVD-201908-440

EXTERNAL IDS

db:	NVD	id:	CVE-2019-10510	Trust: 2.5
db:	JVNDB	id:	JVNDB-2019-010016	Trust: 0.8
db:	CNNVD	id:	CNNVD-201908-440	Trust: 0.7
db:	VULHUB	id:	VHN-142064	Trust: 0.1

sources: VULHUB: VHN-142064 // JVNDB: JVNDB-2019-010016 // CNNVD: CNNVD-201908-440 // NVD: CVE-2019-10510

REFERENCES

url:	https://www.codeaurora.org/security-bulletin/2019/08/05/august-2019-code-aurora-security-bulletin	Trust: 1.7
url:	https://nvd.nist.gov/vuln/detail/cve-2019-10510	Trust: 1.4
url:	https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2019-10510	Trust: 0.8
url:	https://source.android.com/security/bulletin/2019-08-01.html	Trust: 0.6
url:	https://vigilance.fr/vulnerability/google-android-multiple-vulnerabilities-of-august-2019-29951	Trust: 0.6

sources: VULHUB: VHN-142064 // JVNDB: JVNDB-2019-010016 // CNNVD: CNNVD-201908-440 // NVD: CVE-2019-10510

SOURCES

db:	VULHUB	id:	VHN-142064
db:	JVNDB	id:	JVNDB-2019-010016
db:	CNNVD	id:	CNNVD-201908-440
db:	NVD	id:	CVE-2019-10510

LAST UPDATE DATE

2024-11-23T23:01:40.709000+00:00

SOURCES UPDATE DATE

db:	VULHUB	id:	VHN-142064	date:	2019-10-02T00:00:00
db:	JVNDB	id:	JVNDB-2019-010016	date:	2019-10-03T00:00:00
db:	CNNVD	id:	CNNVD-201908-440	date:	2020-07-28T00:00:00
db:	NVD	id:	CVE-2019-10510	date:	2024-11-21T04:19:19.407

SOURCES RELEASE DATE

db:	VULHUB	id:	VHN-142064	date:	2019-09-30T00:00:00
db:	JVNDB	id:	JVNDB-2019-010016	date:	2019-10-03T00:00:00
db:	CNNVD	id:	CNNVD-201908-440	date:	2019-08-06T00:00:00
db:	NVD	id:	CVE-2019-10510	date:	2019-09-30T16:15:10.933