Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
7.8

Qualcomm firmware may let attackers corrupt memory

CVE-2019-10527 · published 6 years ago
Summary

The shared memory area in Qualcomm’s Linux kernel and in the firmware for APQ8009, APQ8017, APQ8053 and APQ8096AU devices can be tampered with if the main operating system is breached. This could allow a malicious actor to write beyond the intended memory region, leading to data corruption or system crashes. Apply the latest firmware and kernel updates from Qualcomm and Google to close the gap.

What to do
  • Update google :linux_kernel:qualcomm to version SoCVersion:2020-09-05.
Affected software
Ecosystem VendorProductAffected versions
Android google :linux_kernel:qualcomm >= SoCVersion:0, < SoCVersion:2020-09-05
Fix: upgrade to SoCVersion:2020-09-05
– qualcomm apq8009_firmware All versions
cpe:2.3:o:qualcomm:apq8009_firmware:-:*:*:*:*:*:*:*
– qualcomm apq8017_firmware All versions
cpe:2.3:o:qualcomm:apq8017_firmware:-:*:*:*:*:*:*:*
– qualcomm apq8053_firmware All versions
cpe:2.3:o:qualcomm:apq8053_firmware:-:*:*:*:*:*:*:*
– qualcomm apq8096au_firmware All versions
cpe:2.3:o:qualcomm:apq8096au_firmware:-:*:*:*:*:*:*:*
– qualcomm apq8098_firmware All versions
cpe:2.3:o:qualcomm:apq8098_firmware:-:*:*:*:*:*:*:*
– qualcomm bitra_firmware All versions
cpe:2.3:o:qualcomm:bitra_firmware:-:*:*:*:*:*:*:*
– qualcomm ipq6018_firmware All versions
cpe:2.3:o:qualcomm:ipq6018_firmware:-:*:*:*:*:*:*:*
– qualcomm ipq8074_firmware All versions
cpe:2.3:o:qualcomm:ipq8074_firmware:-:*:*:*:*:*:*:*
– qualcomm kamorta_firmware All versions
cpe:2.3:o:qualcomm:kamorta_firmware:-:*:*:*:*:*:*:*
– qualcomm mdm9150_firmware All versions
cpe:2.3:o:qualcomm:mdm9150_firmware:-:*:*:*:*:*:*:*
– qualcomm mdm9205_firmware All versions
cpe:2.3:o:qualcomm:mdm9205_firmware:-:*:*:*:*:*:*:*
– qualcomm mdm9206_firmware All versions
cpe:2.3:o:qualcomm:mdm9206_firmware:-:*:*:*:*:*:*:*
– qualcomm mdm9207c_firmware All versions
cpe:2.3:o:qualcomm:mdm9207c_firmware:-:*:*:*:*:*:*:*
– qualcomm mdm9607_firmware All versions
cpe:2.3:o:qualcomm:mdm9607_firmware:-:*:*:*:*:*:*:*
– qualcomm mdm9640_firmware All versions
cpe:2.3:o:qualcomm:mdm9640_firmware:-:*:*:*:*:*:*:*
– qualcomm mdm9650_firmware All versions
cpe:2.3:o:qualcomm:mdm9650_firmware:-:*:*:*:*:*:*:*
– qualcomm msm8905_firmware All versions
cpe:2.3:o:qualcomm:msm8905_firmware:-:*:*:*:*:*:*:*
– qualcomm msm8909_firmware All versions
cpe:2.3:o:qualcomm:msm8909_firmware:-:*:*:*:*:*:*:*
– qualcomm msm8909w_firmware All versions
cpe:2.3:o:qualcomm:msm8909w_firmware:-:*:*:*:*:*:*:*
– qualcomm msm8917_firmware All versions
cpe:2.3:o:qualcomm:msm8917_firmware:-:*:*:*:*:*:*:*
– qualcomm msm8920_firmware All versions
cpe:2.3:o:qualcomm:msm8920_firmware:-:*:*:*:*:*:*:*
– qualcomm msm8937_firmware All versions
cpe:2.3:o:qualcomm:msm8937_firmware:-:*:*:*:*:*:*:*
– qualcomm msm8940_firmware All versions
cpe:2.3:o:qualcomm:msm8940_firmware:-:*:*:*:*:*:*:*
– qualcomm msm8953_firmware All versions
cpe:2.3:o:qualcomm:msm8953_firmware:-:*:*:*:*:*:*:*
– qualcomm msm8996_firmware All versions
cpe:2.3:o:qualcomm:msm8996_firmware:-:*:*:*:*:*:*:*
– qualcomm msm8996au_firmware All versions
cpe:2.3:o:qualcomm:msm8996au_firmware:-:*:*:*:*:*:*:*
– qualcomm msm8998_firmware All versions
cpe:2.3:o:qualcomm:msm8998_firmware:-:*:*:*:*:*:*:*
– qualcomm nicobar_firmware All versions
cpe:2.3:o:qualcomm:nicobar_firmware:-:*:*:*:*:*:*:*
– qualcomm qca4531_firmware All versions
cpe:2.3:o:qualcomm:qca4531_firmware:-:*:*:*:*:*:*:*
– qualcomm qca6574au_firmware All versions
cpe:2.3:o:qualcomm:qca6574au_firmware:-:*:*:*:*:*:*:*
– qualcomm qca8081_firmware All versions
cpe:2.3:o:qualcomm:qca8081_firmware:-:*:*:*:*:*:*:*
– qualcomm qcm2150_firmware All versions
cpe:2.3:o:qualcomm:qcm2150_firmware:-:*:*:*:*:*:*:*
– qualcomm qcn7605_firmware All versions
cpe:2.3:o:qualcomm:qcn7605_firmware:-:*:*:*:*:*:*:*
– qualcomm qcn7606_firmware All versions
cpe:2.3:o:qualcomm:qcn7606_firmware:-:*:*:*:*:*:*:*
– qualcomm qcs404_firmware All versions
cpe:2.3:o:qualcomm:qcs404_firmware:-:*:*:*:*:*:*:*
– qualcomm qcs405_firmware All versions
cpe:2.3:o:qualcomm:qcs405_firmware:-:*:*:*:*:*:*:*
– qualcomm qcs605_firmware All versions
cpe:2.3:o:qualcomm:qcs605_firmware:-:*:*:*:*:*:*:*
– qualcomm qcs610_firmware All versions
cpe:2.3:o:qualcomm:qcs610_firmware:-:*:*:*:*:*:*:*
– qualcomm qm215_firmware All versions
cpe:2.3:o:qualcomm:qm215_firmware:-:*:*:*:*:*:*:*
– qualcomm rennell_firmware All versions
cpe:2.3:o:qualcomm:rennell_firmware:-:*:*:*:*:*:*:*
– qualcomm sa415m_firmware All versions
cpe:2.3:o:qualcomm:sa415m_firmware:-:*:*:*:*:*:*:*
– qualcomm sa515m_firmware All versions
cpe:2.3:o:qualcomm:sa515m_firmware:-:*:*:*:*:*:*:*
– qualcomm sa6155p_firmware All versions
cpe:2.3:o:qualcomm:sa6155p_firmware:-:*:*:*:*:*:*:*
– qualcomm saipan_firmware All versions
cpe:2.3:o:qualcomm:saipan_firmware:-:*:*:*:*:*:*:*
– qualcomm sc7180_firmware All versions
cpe:2.3:o:qualcomm:sc7180_firmware:-:*:*:*:*:*:*:*
– qualcomm sc8180x_firmware All versions
cpe:2.3:o:qualcomm:sc8180x_firmware:-:*:*:*:*:*:*:*
– qualcomm sda660_firmware All versions
cpe:2.3:o:qualcomm:sda660_firmware:-:*:*:*:*:*:*:*
– qualcomm sda845_firmware All versions
cpe:2.3:o:qualcomm:sda845_firmware:-:*:*:*:*:*:*:*
– qualcomm sdm429_firmware All versions
cpe:2.3:o:qualcomm:sdm429_firmware:-:*:*:*:*:*:*:*
Showing 50 of 70. Show the rest
Ecosystem VendorProductAffected versions
– qualcomm sdm429w_firmware All versions
cpe:2.3:o:qualcomm:sdm429w_firmware:-:*:*:*:*:*:*:*
– qualcomm sdm439_firmware All versions
cpe:2.3:o:qualcomm:sdm439_firmware:-:*:*:*:*:*:*:*
– qualcomm sdm450_firmware All versions
cpe:2.3:o:qualcomm:sdm450_firmware:-:*:*:*:*:*:*:*
– qualcomm sdm630_firmware All versions
cpe:2.3:o:qualcomm:sdm630_firmware:-:*:*:*:*:*:*:*
– qualcomm sdm632_firmware All versions
cpe:2.3:o:qualcomm:sdm632_firmware:-:*:*:*:*:*:*:*
– qualcomm sdm636_firmware All versions
cpe:2.3:o:qualcomm:sdm636_firmware:-:*:*:*:*:*:*:*
– qualcomm sdm660_firmware All versions
cpe:2.3:o:qualcomm:sdm660_firmware:-:*:*:*:*:*:*:*
– qualcomm sdm670_firmware All versions
cpe:2.3:o:qualcomm:sdm670_firmware:-:*:*:*:*:*:*:*
– qualcomm sdm710_firmware All versions
cpe:2.3:o:qualcomm:sdm710_firmware:-:*:*:*:*:*:*:*
– qualcomm sdm845_firmware All versions
cpe:2.3:o:qualcomm:sdm845_firmware:-:*:*:*:*:*:*:*
– qualcomm sdm850_firmware All versions
cpe:2.3:o:qualcomm:sdm850_firmware:-:*:*:*:*:*:*:*
– qualcomm sdx20_firmware All versions
cpe:2.3:o:qualcomm:sdx20_firmware:-:*:*:*:*:*:*:*
– qualcomm sdx24_firmware All versions
cpe:2.3:o:qualcomm:sdx24_firmware:-:*:*:*:*:*:*:*
– qualcomm sdx55_firmware All versions
cpe:2.3:o:qualcomm:sdx55_firmware:-:*:*:*:*:*:*:*
– qualcomm sm6150_firmware All versions
cpe:2.3:o:qualcomm:sm6150_firmware:-:*:*:*:*:*:*:*
– qualcomm sm7150_firmware All versions
cpe:2.3:o:qualcomm:sm7150_firmware:-:*:*:*:*:*:*:*
– qualcomm sm8150_firmware All versions
cpe:2.3:o:qualcomm:sm8150_firmware:-:*:*:*:*:*:*:*
– qualcomm sm8250_firmware All versions
cpe:2.3:o:qualcomm:sm8250_firmware:-:*:*:*:*:*:*:*
– qualcomm sxr1130_firmware All versions
cpe:2.3:o:qualcomm:sxr1130_firmware:-:*:*:*:*:*:*:*
– qualcomm sxr2130_firmware All versions
cpe:2.3:o:qualcomm:sxr2130_firmware:-:*:*:*:*:*:*:*
Original advisory text
ASB-A-147102899
u'SMEM partition can be manipulated in case of any compromise on HLOS, thus resulting in access to memory outside of SMEM address range which could lead to memory corruption' in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking in APQ8009, APQ8017, APQ8053, APQ8096AU, APQ8098, Bitra, IPQ6018, IPQ8074, Kamorta, MDM9150, MDM9205, MDM9206, MDM9207C, MDM9607, MDM9640, MDM9650, MSM8905, MSM8909, MSM8909W, MSM8917, MSM8920, MSM8937, MSM8940, MSM8953, MSM8996, MSM8996AU, MSM8998, Nicobar, QCA4531, QCA6574AU, QCA8081, QCM2150, QCN7605, QCN7606, QCS404, QCS405, QCS605, QCS610, QM215, Rennell, SA415M, SA515M, SA6155P, Saipan, SC7180, SC8180X, SDA660, SDA845, SDM429, SDM429W, SDM439, SDM450, SDM630, SDM632, SDM636, SDM660, SDM670, SDM710, SDM845, SDM850, SDX20, SDX24, SDX55, SM6150, SM7150, SM8150, SM8250, SXR1130, SXR2130
References
Severity
7.8 High
Exploitation
<1% chance of attack within 30 days
Type
CWE-129Improper Validation of Array Index
CWE-787Out-of-bounds Write
Timeline
Published1 Sep 2020
Updated29 Oct 2026
First seen3 Sep 2026
Sources
ASB-A-147102899 · OSV
CVE-2019-10527 · NVD
Track software like this
Free during beta