CVE-2019-10549
Estado: ModificadaAlta (7.5)—
Null pointer dereference issue can happen due to improper validation of CSEQ header response received from network in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables in MSM8905, MSM8909, MSM8917, MSM8920, MSM8937, MSM8940, MSM8953, Nicobar, QCM2150, QM215, Rennell, SC8180X, SDM429, SDM429W, SDM439, SDM450, SDM632, SDX24, SDX55, SM6150, SM7150, SM8150
CVSS
- Versión: 3.1
- Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
- Puntuación base: 7.5
Probabilidad de explotación (EPSS)
- Probabilidad de explotación en los próximos 30 días: 0.81%
- Percentil entre todas las CVEs puntuadas: 56
- Fecha de la puntuación: 7/10/2026
EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).
Tecnologías afectadas (22)
Qualcomm — Msm8905 FirmwareQualcomm — Msm8909 FirmwareQualcomm — Msm8917 FirmwareQualcomm — Msm8920 FirmwareQualcomm — Msm8937 FirmwareQualcomm — Msm8940 FirmwareQualcomm — Msm8953 FirmwareQualcomm — Nicobar FirmwareQualcomm — Qcm2150 FirmwareQualcomm — Qm215 FirmwareQualcomm — Rennell FirmwareQualcomm — Sc8180x FirmwareQualcomm — Sdm429 FirmwareQualcomm — Sdm429w FirmwareQualcomm — Sdm439 FirmwareQualcomm — Sdm450 FirmwareQualcomm — Sdm632 FirmwareQualcomm — Sdx24 FirmwareQualcomm — Sdx55 FirmwareQualcomm — Sm6150 FirmwareQualcomm — Sm7150 FirmwareQualcomm — Sm8150 Firmware
CWE
- CWE-476
Referencias
JSON original (NVD)
Mostrar
{
"id": "CVE-2019-10549",
"cveTags": [],
"metrics": {
"cvssMetricV2": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"version": "2.0",
"baseScore": 7.8,
"accessVector": "NETWORK",
"vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:C",
"authentication": "NONE",
"integrityImpact": "NONE",
"accessComplexity": "LOW",
"availabilityImpact": "COMPLETE",
"confidentialityImpact": "NONE"
},
"acInsufInfo": false,
"impactScore": 6.9,
"baseSeverity": "HIGH",
"obtainAllPrivilege": false,
"exploitabilityScore": 10,
"obtainUserPrivilege": false,
"obtainOtherPrivilege": false,
"userInteractionRequired": false
}
],
"cvssMetricV31": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"scope": "UNCHANGED",
"version": "3.1",
"baseScore": 7.5,
"attackVector": "NETWORK",
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"integrityImpact": "NONE",
"userInteraction": "NONE",
"attackComplexity": "LOW",
"availabilityImpact": "HIGH",
"privilegesRequired": "NONE",
"confidentialityImpact": "NONE"
},
"impactScore": 3.6,
"exploitabilityScore": 3.9
}
]
},
"affected": [
{
"source": "product-security@qualcomm.com",
"affectedData": [
{
"vendor": "Qualcomm, Inc.",
"product": "Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables",
"versions": [
{
"status": "affected",
"version": "MSM8905, MSM8909, MSM8917, MSM8920, MSM8937, MSM8940, MSM8953, Nicobar, QCM2150, QM215, Rennell, SC8180X, SDM429, SDM429W, SDM439, SDM450, SDM632, SDX24, SDX55, SM6150, SM7150, SM8150"
}
]
}
]
}
],
"published": "2020-03-05T09:15:15.470",
"references": [
{
"url": "https://www.qualcomm.com/company/product-security/bulletins/march-2020-bulletin",
"tags": [
"Vendor Advisory"
],
"source": "product-security@qualcomm.com"
},
{
"url": "https://www.qualcomm.com/company/product-security/bulletins/march-2020-bulletin",
"tags": [
"Vendor Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
}
],
"vulnStatus": "Modified",
"weaknesses": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"description": [
{
"lang": "en",
"value": "CWE-476"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Null pointer dereference issue can happen due to improper validation of CSEQ header response received from network in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables in MSM8905, MSM8909, MSM8917, MSM8920, MSM8937, MSM8940, MSM8953, Nicobar, QCM2150, QM215, Rennell, SC8180X, SDM429, SDM429W, SDM439, SDM450, SDM632, SDX24, SDX55, SM6150, SM7150, SM8150"
},
{
"lang": "es",
"value": "Se puede presentar un problema de desreferencia del puntero null debido a una comprobación inapropiada de la respuesta del encabezado CSEQ recibida desde la red en los productos Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables en las versiones MSM8905, MSM8909, MSM8917, MSM8920, MSM8937, MSM8940, MSM8953, Nicobar, QCM2150, QM215, Rennell, SC8180X, SDM429, SDM429W, SDM439, SDM450, SDM632, SDX24, SDX55, SM6150, SM7150, SM8150."
}
],
"lastModified": "2026-06-17T02:11:11.600",
"configurations": [
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:qualcomm:msm8905_firmware:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "5C9E095A-71DB-4386-827A-53846236AD00"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:qualcomm:msm8905:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "9E981922-BB71-46E0-96C4-4CF75DF221F6"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:qualcomm:msm8909_firmware:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "CBDA0F03-436B-48C0-A31B-679B264ED989"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:qualcomm:msm8909:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "EF40825E-30CE-46F0-BC05-C3BEE192A3E9"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:qualcomm:msm8917_firmware:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "9BD0305A-E31C-4888-B97E-CE571D40560A"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:qualcomm:msm8917:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "369295A2-8236-44B6-A09F-7CB0BD20527F"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:qualcomm:msm8920_firmware:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "88413610-9B54-485B-A7A7-8CE4D68D6C9E"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:qualcomm:msm8920:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "50F55EB4-B6C3-41FE-9B8F-F17D94F170F2"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:qualcomm:msm8937_firmware:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F3D56596-D726-44FD-ADEA-901D972AC66A"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:qualcomm:msm8937:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "A58B5A6E-84B9-4356-9CFE-4E80BD81FB33"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:qualcomm:msm8940_firmware:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "372B5A77-74D4-437F-A228-040963861232"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:qualcomm:msm8940:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "68AF5243-40F1-4C9A-BBCD-FA259C0B008B"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:qualcomm:msm8953_firmware:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "BE4E0E39-0081-4261-8350-149E763AB462"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:qualcomm:msm8953:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "94F76229-1A4A-4306-A4CC-C823A99F041A"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:qualcomm:nicobar_firmware:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "490B208B-BBF3-4C58-A2BD-626DF6841AEE"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:qualcomm:nicobar:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "572C4751-B805-430C-B26B-2DF661B362C2"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:qualcomm:qcm2150_firmware:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "723EAD03-6C32-4B1C-95C1-6FDA94F08151"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:qualcomm:qcm2150:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "FBB4BB6E-8AF2-433A-A36C-0711598602BC"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:qualcomm:qm215_firmware:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F18CD1F1-C36A-4840-88CD-8F00BD68EF1A"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:qualcomm:qm215:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "6A01800E-994E-4095-AD86-F02DC9D9C86E"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:qualcomm:rennell_firmware:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D49376E9-D31E-4E84-9401-45859263F26C"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:qualcomm:rennell:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "B6D66742-81FA-46D6-B7A2-5460923D81A8"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:qualcomm:sc8180x_firmware:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "30A45C1A-C921-42B5-9237-367245023B45"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:qualcomm:sc8180x:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "56C9D979-F214-4CD4-8CF9-43BC804BB179"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:qualcomm:sdm429_firmware:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "9DFD2C9A-6C25-4B8F-BE64-DAD3DCCDEADD"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:qualcomm:sdm429:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "8DE61FCE-CA87-46E1-981D-B44697E54CB1"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:qualcomm:sdm429w_firmware:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C7E52771-4FB7-45DB-A349-4DD911F53752"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:qualcomm:sdm429w:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "72F6CE39-9299-4FC3-BC48-11F79034F2E4"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:qualcomm:sdm439_firmware:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "84289E6D-DA2A-4D04-9DDA-E8C46DDDD056"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:qualcomm:sdm439:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "C0B56360-7AC3-410A-B7F8-1BE8514B3781"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:qualcomm:sdm450_firmware:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "8F3B5AFF-4AD4-4C10-9E39-C553C7E9E16E"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:qualcomm:sdm450:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "A09E7B90-DD7B-4617-90FD-29FF5BB190A9"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:qualcomm:sdm632_firmware:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A02E12AC-F845-4164-9D95-ACD7167B6DD6"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:qualcomm:sdm632:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "321F7DE7-E6E9-449F-867B-04A9F53334B0"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:qualcomm:sdx24_firmware:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F9BE864E-7B1E-44D5-A10A-60078095DE33"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:qualcomm:sdx24:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "96DD6B48-2554-464D-A061-DBB4B8E00758"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:qualcomm:sdx55_firmware:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E93FB34B-3674-404D-9687-E092E9A246AB"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:qualcomm:sdx55:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "F3FF5A9A-A34A-499C-B6E0-D67B496C5454"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:qualcomm:sm6150_firmware:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "8ABE492A-3755-4969-9DEB-4B85EBB84644"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:qualcomm:sm6150:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "E3D3787B-6ACC-4591-B041-01307ED66C36"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:qualcomm:sm7150_firmware:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F63A748F-2236-4486-83F1-DE4BCBE5D56D"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:qualcomm:sm7150:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "184F3DFC-27E8-48AC-B46C-C589DBCBF030"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:qualcomm:sm8150_firmware:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "9286B1E8-E39F-4DAA-8969-311CA2A0A8AA"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:qualcomm:sm8150:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "19B9AE36-87A9-4EE7-87C8-CCA2DCF51039"
}
],
"operator": "OR"
}
],
"operator": "AND"
}
],
"sourceIdentifier": "product-security@qualcomm.com"
}