PT-2019-11944 · Qualcomm · Sdm630+21

Publicado 2019-12-18 · Atualizado 2019-12-22 · CVE-2019-10605

Positive Technologies (AI Summary)

CVSS v2.0

7.2

Alta

Vetor base

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Qualcomm Snapdragon versions (affected versions not specified)

Description A buffer overwrite issue can occur due to a lack of range check of an array index received from firmware in the IEEE80211 header filling function. This issue affects various Qualcomm Snapdragon products, including Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, and Snapdragon Wired Infrastructure and Networking, in specific chipsets such as APQ8009, APQ8053, IPQ8074, MDM9607, MDM9650, MSM8909, MSM8939, QCN7605, SDA660, SDM630, SDM636, SDM660, SDX20, and SDX24.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Buffer Overflow

Enumeração de Fraquezas

CWE-120

Identificadores relacionados

CVE-2019-10605

Produtos afetados

Apq8009

Apq8053

Ipq8074

Mdm9607

Mdm9650

Msm8909W

Msm8939

Qcn7605

Sda660

Sdm630

Sdm636

Sdm660

Sdx20

Sdx24

Snapdragon Auto

Snapdragon Consumer Electronics Connectivity

Snapdragon Consumer Iot

Snapdragon Industrial Iot

Snapdragon Iot

Snapdragon Mobile

Snapdragon Voice & Music

Snapdragon Wired Infrastructure/Networking

Referências · 2

• https://qualcomm.com/company/product-security/bulletins/december-2019-bulletin · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2019-10605 · Nota de Segurança