CVE-2019-10557: Qualcomm APQ8009 Firmware

Critical severity, CVSS 9.8. EPSS: 1.1% chance of exploitation in the next 30 days.

Out-of-bound read in the wireless driver in the Linux kernel due to lack of check of buffer length. in Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music in APQ8009, APQ8017, APQ8053, APQ8096AU, MDM9206, MDM9207C, MDM9607, MDM9650, MSM8996AU, QCA6174A, QCA6574AU, QCA9377, QCA9379, QCN7605, QCS605, SDA660, SDA845, SDM630, SDM636, SDM660, SDX20, SDX55, SXR1130

Affected products

Qualcomm APQ8009 Firmware: affected versions not specified
Qualcomm APQ8017 Firmware: affected versions not specified
Qualcomm APQ8053 Firmware: affected versions not specified
Qualcomm APQ8096AU Firmware: affected versions not specified
Qualcomm MDM9206 Firmware: affected versions not specified
Qualcomm MDM9207C Firmware: affected versions not specified
Qualcomm MDM9607 Firmware: affected versions not specified
Qualcomm MDM9650 Firmware: affected versions not specified
Qualcomm MSM8996AU Firmware: affected versions not specified
Qualcomm QCA6174A Firmware: affected versions not specified
Qualcomm QCA6574AU Firmware: affected versions not specified
Qualcomm QCA9377 Firmware: affected versions not specified
Qualcomm QCA9379 Firmware: affected versions not specified
Qualcomm QCN7605 Firmware: affected versions not specified
Qualcomm QCS605 Firmware: affected versions not specified
Qualcomm SDA660 Firmware: affected versions not specified
Qualcomm SDA845 Firmware: affected versions not specified
Qualcomm SDM630 Firmware: affected versions not specified
Qualcomm SDM636 Firmware: affected versions not specified
Qualcomm SDM660 Firmware: affected versions not specified
Qualcomm SDX20 Firmware: affected versions not specified
Qualcomm SDX55 Firmware: affected versions not specified
Qualcomm SXR1130 Firmware: affected versions not specified

Published 2019-12-18. Last modified 2026-06-17.