PT-2019-11910 · Qualcomm · Qualcomm Snapdragon Auto

Publicado 2019-12-18 · Atualizado 2019-12-23 · CVE-2019-10518

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Média

Vetor base

AV:L/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Qualcomm Snapdragon Auto versions APQ8009, APQ8017, APQ8053, APQ8064, APQ8096AU, APQ8098, IPQ4019, IPQ8064, IPQ8074, MDM9150, MDM9206, MDM9207C, MDM9607, MDM9640, MDM9650, MSM8905, MSM8909, MSM8909W, MSM8917, MSM8920, MSM8937, MSM8939, MSM8940, MSM8953, MSM8996AU, MSM8998, QCA6574AU, QCS405, QCS605, SDA660, SDA845, SDM429, SDM439, SDM630, SDM632, SDM636, SDM660, SDM670, SDM710, SDM845, SDX20, SDX24, SDX55, SM6150, SM7150, SM8150, SM8250, SXR1130, SXR2130

Description The issue is related to a use after free of a pointer in the iWLAN scenario during netmgr state transition to CONNECT. This affects various Qualcomm Snapdragon products, including Auto, Compute, Consumer IOT, Industrial IOT, IoT, Mobile, Voice & Music, Wearables, and Wired Infrastructure and Networking.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Use After Free

Enumeração de Fraquezas

CWE-416

Identificadores relacionados

CVE-2019-10518

Produtos afetados

Qualcomm Snapdragon Auto

Referências · 2

• https://nvd.nist.gov/vuln/detail/CVE-2019-10518 · Nota de Segurança
• https://qualcomm.com/company/product-security/bulletins/december-2019-bulletin · Aviso do Fabricante