CVE-2019-10489 in Snapdragon Auto

Riassunto

di VulDB • 28/06/2026

Un possibile dereferenziamento di puntatore nullo può verificarsi durante l'analisi del clip avi in fase di copia nei prodotti Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music e Snapdragon Wearables basati sui chipset MDM9206, MDM9607, MSM8909W, MSM8996AU, QCA6574AU, QCS405, QCS605, Qualcomm 215, SD 210/SD 212/SD 205, SD 425, SD 427, SD 430, SD 435, SD 439 / SD 429, SD 450, SD 600, SD 615/16/SD 415, SD 625, SD 632, SD 636, SD 665, SD 675, SD 712 / SD 710 / SD 670, SD 730, SD 820, SD 820A, SD 835, SD 845 / SD 850, SD 855, SDA660, SDM439, SDM630, SDM660 e SDX20.

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

• Prenotare: 29/03/2019
• Moderazione: accettato
• Voce: VDB-142720
• CPE: pronto
• CWE: CWE-476 (confermato)
• CVSS: 7.5 (NVD)
• EPSS: 0.00814
• KEV: no
• Attività: molto basso
• Settore: Telecommunication, Hospital, ...

Fonti

• MITRE: https://www.cve.org/CVERecord?id=CVE-2019-10489
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2019-10489
• CVE Details: https://www.cvedetails.com/cve/CVE-2019-10489/