CVE-2019-10525

Buffer overflow during SIB read when network configures complete sib list along with first and last segment of other SIB in Snapdragon Auto, Snapdragon…

published December 18, 2019

CVSS
—
EPSS
1%
Percentile
59.3
In the wild
Unconfirmed
What it is

⚠️ A pesky buffer overflow during SIB reads could leave your Snapdragon devices vulnerable! 📱 Think of this like trying to pour a gallon of milk into a pint-sized glass — eventually, it spills over and creates a mess. Here, extra data can leak into areas it shouldn’t, potentially leading to erratic behavior. An attacker could exploit this hiccup to manipulate the device's operations, leading to crashes or unpredictable behavior. While there’s no known malicious exploit in the wild (phew!), the risk of disruption remains a concern for users of affected Snapdragon devices.

Put simply

Think of this like trying to pour a gallon of milk into a pint-sized glass — eventually, it spills over and creates a mess. Here, extra data can leak into areas it shouldn’t, potentially leading to erratic behavior. This vulnerability arises from a buffer overflow when reading SIB data, affecting various Snapdragon platforms. When the device tries to process too much data from the SIB list, it could overwrite adjacent memory, leading to instability.

What to do

An attacker could exploit this hiccup to manipulate the device's operations, leading to crashes or unpredictable behavior. While there’s no known malicious exploit in the wild (phew!), the risk of disruption remains a concern for users of affected Snapdragon devices. Update your Snapdragon device firmware to the latest version as soon as it’s available. Monitor for patches from your device manufacturer to mitigate any potential risks. You've got this! Stay vigilant and keep your devices updated for ultimate protection! 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00902 · 59.3th percentile
Published
2019-12-18T05:25Z
EPSS history
Timeline
  • 18 DEC 05:25Z
    Buffer overflow during SIB read when network configures complete sib list along with first and last segment of other SIB in Snapdragon Auto, Snapdragon…
    cvelistv5