PT-2019-16362 · Qualcomm · Snapdragon Mobile+10

Publicado 2019-07-22 · Atualizado 2020-08-24 · CVE-2019-2292

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Média

Vetor base

AV:L/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Qualcomm Snapdragon versions (affected versions not specified)

Description The issue is related to out of bound access that can occur due to buffer copy without checking the size of input received from WLAN firmware. This affects various Qualcomm Snapdragon products, including Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, and Snapdragon Voice & Music, in a range of chipsets such as MDM9150, MDM9650, MSM8996AU, QCA6574AU, QCS405, QCS605, and several SD series chipsets.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Memory Corruption

Enumeração de Fraquezas

CWE-787

Identificadores relacionados

CVE-2019-2292

Produtos afetados

Mdm9150

Mdm9650

Msm8996Au

Qca6574Au

Qcs405

Qcs605

Snapdragon Auto

Snapdragon Consumer Iot

Snapdragon Industrial Iot

Snapdragon Mobile

Snapdragon Voice & Music

Referências · 2

• https://nvd.nist.gov/vuln/detail/CVE-2019-2292 · Nota de Segurança
• https://codeaurora.org/security-bulletin/2019/06/03/june-2019-code-aurora-security-bulletin · Correção