What’s Vulnerable › Vulnerabilities

CVE-2019-10535

• Severity: medium (CVSS 5.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2019-11-21 · updated 2026-06-17
• Weakness: CWE-20

Description

Improper validation for loop variable received from firmware can lead to out of bound access in WLAN function while iterating through loop in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music in APQ8053, APQ8096AU, APQ8098, MDM9640, MSM8996AU, MSM8998, QCA6574AU, QCN7605, QCS405, QCS605, SDA845, SDM845, SDX20

Affected products

• Qualcomm Apq8053 Firmware: all versions
• Qualcomm Apq8096Au Firmware: all versions
• Qualcomm Apq8098 Firmware: all versions
• Qualcomm Mdm9640 Firmware: all versions
• Qualcomm Msm8996Au Firmware: all versions
• Qualcomm Msm8998 Firmware: all versions
• Qualcomm Qca6574Au Firmware: all versions
• Qualcomm Qcn7605 Firmware: all versions
• Qualcomm Qcs405 Firmware: all versions
• Qualcomm Qcs605 Firmware: all versions
• Qualcomm Sda845 Firmware: all versions
• Qualcomm Sdm845 Firmware: all versions
• Qualcomm Sdx20 Firmware: all versions

References

• https://www.qualcomm.com/company/product-security/bulletins/october-2019-bulletin
• https://www.qualcomm.com/company/product-security/bulletins/october-2019-bulletin

Get alerted when CVE-2019-10535 or the next vulnerability affects your stack