Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
5.5

Qualcomm firmware may read beyond memory in WLAN loop

CVE-2019-10535 · published 6 years ago
Summary

The firmware on several Qualcomm Snapdragon chipsets can fail to check a loop counter from the device’s own firmware, allowing the WLAN code to read past the end of a data buffer. This could let an attacker cause a crash or potentially execute unauthorized code. Update the firmware to the latest version provided by Qualcomm to apply the fix.

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software
VendorProductAffected versions
qualcomm apq8053_firmware All versions
cpe:2.3:o:qualcomm:apq8053_firmware:-:*:*:*:*:*:*:*
qualcomm apq8096au_firmware All versions
cpe:2.3:o:qualcomm:apq8096au_firmware:-:*:*:*:*:*:*:*
qualcomm apq8098_firmware All versions
cpe:2.3:o:qualcomm:apq8098_firmware:-:*:*:*:*:*:*:*
qualcomm mdm9640_firmware All versions
cpe:2.3:o:qualcomm:mdm9640_firmware:-:*:*:*:*:*:*:*
qualcomm msm8996au_firmware All versions
cpe:2.3:o:qualcomm:msm8996au_firmware:-:*:*:*:*:*:*:*
qualcomm msm8998_firmware All versions
cpe:2.3:o:qualcomm:msm8998_firmware:-:*:*:*:*:*:*:*
qualcomm qca6574au_firmware All versions
cpe:2.3:o:qualcomm:qca6574au_firmware:-:*:*:*:*:*:*:*
qualcomm qcn7605_firmware All versions
cpe:2.3:o:qualcomm:qcn7605_firmware:-:*:*:*:*:*:*:*
qualcomm qcs405_firmware All versions
cpe:2.3:o:qualcomm:qcs405_firmware:-:*:*:*:*:*:*:*
qualcomm qcs605_firmware All versions
cpe:2.3:o:qualcomm:qcs605_firmware:-:*:*:*:*:*:*:*
qualcomm sda845_firmware All versions
cpe:2.3:o:qualcomm:sda845_firmware:-:*:*:*:*:*:*:*
qualcomm sdm845_firmware All versions
cpe:2.3:o:qualcomm:sdm845_firmware:-:*:*:*:*:*:*:*
qualcomm sdx20_firmware All versions
cpe:2.3:o:qualcomm:sdx20_firmware:-:*:*:*:*:*:*:*
Original advisory text
Improper validation for loop variable received from firmware can lead to out of bound access in WLAN function while iterating through loop in Snapdragon Auto, Snapdragon Compute, Snapdragon Consume...
Improper validation for loop variable received from firmware can lead to out of bound access in WLAN function while iterating through loop in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music in APQ8053, APQ8096AU, APQ8098, MDM9640, MSM8996AU, MSM8998, QCA6574AU, QCN7605, QCS405, QCS605, SDA845, SDM845, SDX20
References
Fix within
Internet-facing 60 days
Internal At next upgrade
  • Not known to be exploited
  • Needs hands-on effort to exploit (estimated)
  • Gives an attacker partial control (estimated)
Severity
5.5 Medium
Exploitation
<1% chance of attack within 30 days
Type
CWE-20Improper Input Validation
CWE-119Buffer Overflow
Timeline
Published21 Nov 2019
Updated26 Oct 2026
First seen29 Sep 2026
Sources
CVE-2019-10535 · NVD
Track software like this
Free during beta