CVE-2019-10574

CVE-2019-10574 is a high-severity vulnerability affecting numerous Qualcomm Snapdragon products, including those found in mobile, IoT, and automotive devices. It stems from a lack of boundary checks for data offsets received from the High-Level Operating System (HLOS), leading to out-of-bound reads. This flaw can be exploited locally with low attack complexity, potentially resulting in high confidentiality impact (data disclosure) and high availability impact (denial of service). The CVSS score of 7.1 reflects its significant risk. While there is no evidence of active exploitation (not in KEV), and no public exploit code (Metasploit, Nuclei, ExploitDB) is available, the vulnerability has garnered some community discussion and media coverage, indicating awareness within the security community. Its EPSS score is very low, suggesting a low probability of exploitation in the wild.