PT-2019-16390 · Qualcomm · Sda660+47
Publicado
2019-07-25
·
Atualizado
2019-08-05
·
CVE-2019-2326
CVSS v2.0
7.2
Alta
| Vetor | AV:L/AC:L/Au:N/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions
Qualcomm Snapdragon Auto versions MDM9150
Qualcomm Snapdragon Compute versions MDM9150
Qualcomm Snapdragon Connectivity versions MDM9150
Qualcomm Snapdragon Consumer IOT versions MDM9150
Qualcomm Snapdragon Industrial IOT versions MDM9150
Qualcomm Snapdragon Mobile versions MDM9150
Qualcomm Snapdragon Voice & Music versions MDM9150
Qualcomm Snapdragon Wearables versions MDM9150
Qualcomm MDM9206
Qualcomm MDM9607
Qualcomm MDM9640
Qualcomm MDM9650
Qualcomm MSM8909W
Qualcomm MSM8996AU
Qualcomm QCS405
Qualcomm QCS605
Qualcomm 215
Qualcomm SD 210
Qualcomm SD 212
Qualcomm SD 205
Qualcomm SD 425
Qualcomm SD 427
Qualcomm SD 430
Qualcomm SD 435
Qualcomm SD 439
Qualcomm SD 429
Qualcomm SD 450
Qualcomm SD 625
Qualcomm SD 632
Qualcomm SD 636
Qualcomm SD 665
Qualcomm SD 675
Qualcomm SD 712
Qualcomm SD 710
Qualcomm SD 670
Qualcomm SD 730
Qualcomm SD 820
Qualcomm SD 820A
Qualcomm SD 835
Qualcomm SD 845
Qualcomm SD 850
Qualcomm SD 855
Qualcomm SDA660
Qualcomm SDM439
Qualcomm SDM630
Qualcomm SDM660
Qualcomm SDX20
Qualcomm SDX24
Description
The issue arises when a data token received from ADSP is used without validation as an index into an array, leading to out-of-bounds access. This affects various Qualcomm Snapdragon products, including Auto, Compute, Connectivity, Consumer IOT, Industrial IOT, Mobile, Voice & Music, and Wearables, across a range of chipsets.
Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Improper Validation of Array Index
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
215
Mdm9206
Mdm9607
Mdm9640
Mdm9650
Msm8909W
Msm8996Au
Qcs405
Qcs605
Sd 205
Sd 210
Sd 212
Sd 425
Sd 427
Sd 429
Sd 430
Sd 435
Sd 439
Sd 450
Sd 625
Sd 632
Sd 636
Sd 665
Sd 670
Sd 675
Sd 710
Sd 712
Sd 730
Sd 820
Sd 820A
Sd 835
Sd 845
Sd 850
Sd 855
Sda660
Sdm439
Sdm630
Sdm660
Sdx20
Sdx24
Snapdragon Auto
Snapdragon Compute
Snapdragon Connectivity
Snapdragon Consumer Iot
Snapdragon Industrial Iot
Snapdragon Mobile
Snapdragon Voice & Music
Snapdragon Wearables