cve/2019/CVE-2019-10487.md

### [CVE-2019-10487](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-10487)
![](https://img.shields.io/static/v1?label=Product&message=Snapdragon%20Auto%2C%20Snapdragon%20Compute%2C%20Snapdragon%20Consumer%20IOT%2C%20Snapdragon%20Industrial%20IOT%2C%20Snapdragon%20IoT%2C%20Snapdragon%20Mobile%2C%20Snapdragon%20Voice%20%26%20Music%2C%20Snapdragon%20Wearables&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=APQ8009%2C%20APQ8017%2C%20APQ8053%2C%20APQ8096%2C%20APQ8096AU%2C%20APQ8098%2C%20MDM9150%2C%20MDM9205%2C%20MDM9206%2C%20MDM9607%2C%20MDM9615%2C%20MDM9625%2C%20MDM9635M%2C%20MDM9640%2C%20MDM9645%2C%20MDM9650%2C%20MDM9655%2C%20MSM8905%2C%20MSM8909%2C%20MSM8909W%2C%20MSM8917%2C%20MSM8920%2C%20MSM8937%2C%20MSM8939%2C%20MSM8940%2C%20MSM8953%2C%20MSM8996AU%2C%20MSM8998%2C%20Nicobar%2C%20QCM2150%2C%20QCS605%2C%20QM215%2C%20SC8180X%2C%20SDA660%2C%20SDA845%2C%20SDM429%2C%20SDM439%2C%20SDM450%2C%20SDM630%2C%20SDM632%2C%20SDM636%2C%20SDM660%2C%20SDM670%2C%20SDM710%2C%20SDM845%2C%20SDM850%2C%20SDX20%2C%20SDX24%2C%20SDX55%2C%20SM6150%2C%20SM7150%2C%20SM8150%2C%20SXR1130%20&color=brightgreen)
![](https://img.shields.io/static/v1?label=Vulnerability&message=Buffer%20Over-read%20Issue%20in%20Multi-mode%20Call%20processor&color=brightgreen)

### Description

Buffer over read can happen while parsing SMS OTA messages at transport layer if network sends un-intended values in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in APQ8009, APQ8017, APQ8053, APQ8096, APQ8096AU, APQ8098, MDM9150, MDM9205, MDM9206, MDM9607, MDM9615, MDM9625, MDM9635M, MDM9640, MDM9645, MDM9650, MDM9655, MSM8905, MSM8909, MSM8909W, MSM8917, MSM8920, MSM8937, MSM8939, MSM8940, MSM8953, MSM8996AU, MSM8998, Nicobar, QCM2150, QCS605, QM215, SC8180X, SDA660, SDA845, SDM429, SDM439, SDM450, SDM630, SDM632, SDM636, SDM660, SDM670, SDM710, SDM845, SDM850, SDX20, SDX24, SDX55, SM6150, SM7150, SM8150, SXR1130

### POC

#### Reference
- https://www.qualcomm.com/company/product-security/bulletins/december-2019-bulletin

#### Github
No PoCs found on GitHub currently.