CVE-2019-10523
Target specific data is being sent to remote server and leads to information exposure in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Wearables in APQ8009,…
Does this matter?
Lower severity and a low EPSS score (0.19%). Track it; it rarely justifies an emergency change on its own.
Description
Target specific data is being sent to remote server and leads to information exposure in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Wearables in APQ8009, APQ8053, APQ8096AU, MSM8909W, MSM8917, MSM8920, MSM8937, MSM8940, MSM8953, MSM8996AU, QCA6574AU, QCS605, Rennell, SDA660, SDM429W, SDM439, SDM450, SDM710, SDM845, SM7150, SM8150, SM8250, SXR2130
- CVSS 3.1
- 5.5 MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
- EPSS
- 0.19% probability · 8th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-200
- Affected
- qualcomm/apq8009 firmware · qualcomm/apq8053 firmware · qualcomm/apq8096au firmware · qualcomm/msm8909w firmware · qualcomm/msm8917 firmware · qualcomm/msm8920 firmware · qualcomm/msm8937 firmware · qualcomm/msm8940 firmware · qualcomm/msm8953 firmware · qualcomm/msm8996au firmware · qualcomm/qca6574au firmware · qualcomm/qcs605 firmware · qualcomm/rennell firmware · qualcomm/sda660 firmware · qualcomm/sdm429w firmware · qualcomm/sdm439 firmware · qualcomm/sdm450 firmware · qualcomm/sdm710 firmware · qualcomm/sdm845 firmware · qualcomm/sm7150 firmware · +3 more
- Source
- product-security@qualcomm.com
References
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.