CVE-2019-10487

CVE-2019-10487 is a critical buffer over-read vulnerability affecting numerous Qualcomm Snapdragon platforms across various product lines, including Auto, Compute, IoT, Mobile, and Wearables. This flaw allows an unauthenticated attacker to trigger a denial of service, information disclosure, or potentially arbitrary code execution by sending specially crafted SMS OTA messages at the transport layer. With a CVSS score of 9.8, it presents a severe risk due to its network-based attack vector and low attack complexity. While there is no known active exploitation or public exploit code, the vulnerability has garnered significant community discussion, indicating awareness and potential future interest from threat actors.