CVE-2019-10587

Possible Stack overflow can occur when processing a large SDP body or non standard SDP body without right delimiters in Snapdragon Auto, Snapdragon Compute…

published March 5, 2020

CVSS
—
EPSS
1%
Percentile
59.3
In the wild
Unconfirmed
What it is

⚠️ A stack overflow could occur when processing improperly formatted SDP bodies in Snapdragon platforms, which is more common than you'd think! Think of it like a restaurant trying to serve a multi-course meal with missing menu items — too much information and no clear boundaries can lead to chaos in the kitchen! If exploited, this flaw could cause devices to crash or behave unpredictably, potentially rendering them unusable. Imagine a smart home device suddenly shutting down in the middle of a critical task — definitely not ideal!

Put simply

Think of it like a restaurant trying to serve a multi-course meal with missing menu items — too much information and no clear boundaries can lead to chaos in the kitchen! The vulnerability arises because the system does not correctly handle large or improperly delimited SDP (Session Description Protocol) bodies, leading to possible stack overflow conditions during processing. This could be exploited by sending carefully crafted SDP data.

What to do

If exploited, this flaw could cause devices to crash or behave unpredictably, potentially rendering them unusable. Imagine a smart home device suddenly shutting down in the middle of a critical task — definitely not ideal! While no patches are currently available for these Snapdragon devices, it's essential to monitor for updates from your vendor. Additionally, ensure that proper input validation is in place to mitigate the risk of malformed SDP data being processed. Stay vigilant! You've got this! Keep your devices safe and secure, and you'll be a security hero in no time! 🦸

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00902 · 59.3th percentile
Published
2020-03-05T08:56Z
EPSS history
Timeline
  • 05 MAR 08:56Z
    Possible Stack overflow can occur when processing a large SDP body or non standard SDP body without right delimiters in Snapdragon Auto, Snapdragon Compute…
    cvelistv5