CVE-2019-10625

Name of the Vulnerable Software and Affected Versions Snapdragon Auto versions prior to the fixed version Snapdragon Compute versions prior to the fixed version Snapdragon Consumer IOT versions prior to the fixed version Snapdragon Industrial IOT versions prior to the fixed version Snapdragon Mobile versions prior to the fixed version Snapdragon Wearables versions prior to the fixed version APQ8009 version not specified APQ8096AU version not specified MDM9206 version not specified MDM9207C version not specified MDM9607 version not specified MDM9640 version not specified MDM9650 version not specified QCS605 version not specified Rennell version not specified SC8180X version not specified SDM429W version not specified SDM710 version not specified SDX55 version not specified SM7150 version not specified SM8150 version not specified

Description The issue is related to out of bound access in diag services when DCI command buffer reallocation is not done properly with required capacity. This affects various Snapdragon products, including Auto, Compute, Consumer IOT, Industrial IOT, Mobile, and Wearables, across multiple chipsets.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.