CVE-2019-10590

Out of bound access while parsing dts atom, which is non-standard as it does not have valid number of tracks in Snapdragon Auto, Snapdragon Compute, Snapdragon…

published February 7, 2020

CVSS
—
EPSS
1%
Percentile
59.5
In the wild
Unconfirmed
What it is

⚠️ Parsing errors can lead to unexpected behavior. This out-of-bounds access issue hides within the DTS atom parsing in several Snapdragon chipsets, allowing potential mishaps in systems relying on them. Think of it like a delivery driver who misreads the number of packages on their manifest — they might leave some important ones behind or try to deliver too many to one address, causing confusion and delays in logistics. If exploited, this vulnerability could allow attackers to cause crashes, unexpected behaviors, or even system instability in devices that rely on these Snapdragon chipsets. This could be particularly concerning for industrial IoT applications where reliability is paramount.

Put simply

Think of it like a delivery driver who misreads the number of packages on their manifest — they might leave some important ones behind or try to deliver too many to one address, causing confusion and delays in logistics. CVE-2019-10590 involves an out-of-bounds access during DTS atom parsing. The non-standard handling of track numbers can lead to instability in various Snapdragon platforms including Automotive, Compute, and Mobile devices.

What to do

If exploited, this vulnerability could allow attackers to cause crashes, unexpected behaviors, or even system instability in devices that rely on these Snapdragon chipsets. This could be particularly concerning for industrial IoT applications where reliability is paramount. While there's no current known exploit, it's wise to monitor for updates from Qualcomm regarding patches or mitigation strategies. Ensure that all device firmware is regularly updated to the latest versions to minimize risks. You've got this! Stay proactive with updates, and you'll keep those Snapdragon devices humming along smoothly! 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00907 · 59.5th percentile
Published
2020-02-07T05:00Z
EPSS history
Timeline
  • 07 FEB 05:00Z
    Out of bound access while parsing dts atom, which is non-standard as it does not have valid number of tracks in Snapdragon Auto, Snapdragon Compute, Snapdragon…
    cvelistv5